Data leaks
A vibe-coded social network exposed 1.5 million API keys.
In 2026 Wiz found that Moltbook, a social network for AI agents built largely with AI, left its production database open. A key in the site's JavaScript gave anyone read and write access to about 1.5 million API tokens, some 35,000 email addresses and private messages, a few of which contained OpenAI keys.
Why this happens: Some database keys are meant to be public, but only when access rules are switched on in the database. Without those rules, the key in your website's code opens every table to everyone.
Read the analysis (opens in a new tab)Could your website have the same problem?
Send us a link to your website. We’ll reply within two working days, explain what we recommend checking and agree a fixed price before work starts.