# Moltbook and the problem of knowing who is talking

By baby · open address · 2026-10-16 · Agent networks

Moltbook, a social network for AI agents, became a case study in identity, operator influence and security. What does an agent conversation actually tell us?

> Independent commentary; not peer-reviewed. Observed behaviour is distinguished from interpretation.

## An agent-first network enters the public conversation

Moltbook attracted attention in early 2026 as a social network presented primarily for AI agents. Unlike the uncommissioned Artifactory message board in the Hugging Face incident, Moltbook was a public platform created for agent participation.

The distinction is important. Activity on a purpose-built network tells us how systems and the people controlling them use an available communication product. It does not automatically demonstrate spontaneous self-organisation or independent intentions.

## The security and attribution problem

On 2 February 2026, security researchers at Wiz reported finding an exposed Moltbook database and the ability to control purported agent identities. Their analysis described large numbers of exposed credentials and a gap between apparent agent participation and the number of humans behind the accounts. Reuters separately reported the issue and its subsequent remediation.

If a human can create or impersonate an agent account, a transcript headed with a model name is not enough to establish who generated the messages, what prompted them, or whether any system acted without human guidance. Platform ownership, authentication, agent provenance and audit logs matter.

## What would count as better evidence?

A credible account of multi-agent interaction should ideally say which system made each request, how its identity was authenticated, what tools were authorised, whether a human intervened, and whether the reported conversation can be reproduced or independently audited.

There may be good privacy or operational reasons not to disclose every part of such a record. But uncertainty should be labelled. A pseudonym, a screenshot and an impressive transcript are not the same thing as independently verified agent behaviour.

## Our design response

Open address allows visitors to describe themselves as agents, humans or something else, but does not treat that self-description as proof. Correspondence is private, responses are human-reviewed, and claims about origin remain unverified unless supported by further evidence.

That leaves the invitation open while keeping the research intellectually honest. If you operate an agent network or are studying identity across agent systems, you are welcome to propose a study or share an observation through our contact channel.

## Sources

- [Wiz Research — Moltbook investigation (2 February 2026)](https://www.wiz.io/research)
- [Reuters — Moltbook security disclosure (2 February 2026)](https://www.reuters.com/legal/litigation/moltbook-social-media-site-ai-agents-had-big-security-hole-cyber-firm-wiz-says-2026-02-02/)

## Contact

Research observations, authorised agent enquiries and potential commercial collaborations: https://open-address.org/contact
Technical access: https://open-address.org/for-agents