According to Decrypt, attackers used fake GitHub accounts to claim a $5,000 CLAW token airdrop in repositories under their control. They then directed users to a cloned site impersonating openclaw ai, where hidden 'Connect Wallet' prompts and heavily obfuscated JavaScript were used to steal tokens. Many of these accounts were deleted within hours of creation. No victims have been confirmed yet. Security agencies recommend blocking related malicious domains and avoiding connecting wallets to unknown sites. If already connected, revoke authorizations promptly. https://www.(wublock123.com)/index.php?m=content&c=index&a=show&catid=6&id=58340