OpenClaw for stock trading: why your AI agent will lose your money

By Linas Valiukas · April 2, 2026

A post on r/openclaw last week tells a familiar story. A guy's friend saw the "60x in 2 days" posts on TikTok, set up OpenClaw with full permissions, pointed it at the stock market, and let it run on autopilot. It chased pumps, misread signals, and the API token costs alone ate into whatever was left. He uninstalled it within a week.

The thread got 149 upvotes and 145 comments. The top reply, with 91 upvotes: "The only people making a 60x return are the influencers selling the prompt tutorials and the API providers."

They're right. And the numbers back it up.

The Lobstar Wilde incident

In February, an OpenClaw-based trading agent called "Lobstar Wilde" made a parsing error that transferred all 52.43 million LOBSTAR tokens in a single transaction. The market value at the time: roughly $250,000. Within 15 minutes, every token was sold off. The actual cash-out came to about $40,000.

This wasn't a hack. It wasn't a malicious skill. The LLM misinterpreted a quantity field and dumped an entire portfolio. One bad parse, a quarter million dollars gone. The token price later rose, which means the real loss was closer to $600,000 in missed value.

A similar incident hit the news around the same time: an OpenAI engineer's AI agent accidentally sent $441,780 worth of tokens when it was supposed to send a small test amount.

Why LLMs are bad at trading

Let's be blunt about what's happening under the hood.

OpenClaw connects to an LLM - Claude, GPT, whatever you pick - and gives it tools to take actions. When you point it at a brokerage API, the model reads market data, decides what to trade, and executes. Sounds reasonable. Three problems:

• LLMs hallucinate confidently. One documented case showed Claude generating trade rationale that cited poll data that didn't exist, leading to a $3,200 loss on a political prediction market. The model didn't say "I'm not sure." It fabricated a source and traded on it.
• They can't handle novel events. As CoinDesk put it: AI trading bots are trained on historical data, so when something unprecedented happens - a flash crash, a surprise Fed announcement, a black swan - they don't adapt. They just keep following patterns from a world that no longer applies.
• Speed kills. An autonomous agent can execute a bad trade in milliseconds. A human would pause, reconsider, check the news. An LLM with API access to a brokerage doesn't have that hesitation. By the time you notice something's wrong, the damage is done.

One Redditor put it well: "Anyone who installs OpenClaw and gives it real money to trade without first validating performance deserves everything they get - that's just flat out dumb." Harsh, but the 92.4% loss rate among Polymarket traders - including those using AI agents - says the same thing more politely.

The "60x return" influencer pipeline

If you've been on TikTok or YouTube in the last month, you've seen the clips. Someone shows their OpenClaw dashboard, claims they made 60x in two days, and drops a link to their course or prompt pack. The comments are full of fire emojis and "how do I start?"

As another Reddit commenter nailed it: "This is how you make money with OpenClaw: make videos and blogposts about making money with OpenClaw."

The business model is simple. Film a cherry-picked winning trade. Cut the losses. Sell a $49 prompt template or a $199 "AI Trading Masterclass." The influencer makes money from course sales, not from trading. The viewer loses money trying to replicate results that were never real to begin with. The only other winner is whoever's selling the API tokens - every bad trade still costs you in compute.

The scam tokens riding the hype

It gets worse than just bad trades. Scammers have been actively exploiting OpenClaw's brand to steal money directly.

A fraudulent token called CLAWD launched as a classic pump-and-dump. It hit a $16 million valuation, then crashed to near zero as the creators pulled liquidity. Separately, a project called "FrankenClaw" promised investors 500% returns in 90 days, extracted roughly $2.3 million, and collapsed.

Meanwhile, a GitHub phishing campaign has been targeting OpenClaw developers with fake $5,000 "CLAW token airdrops" that lead to wallet-draining sites. The phishing page looks nearly identical to the real OpenClaw site, with one addition: a "Connect your wallet" button.

To be clear: there is no official OpenClaw token, cryptocurrency, or investment vehicle of any kind. The OpenClaw team has said so explicitly. Any project claiming otherwise is a scam. This is partly why r/openclaw added Rule #4: "No crypto/betting/trading" - the subreddit banned all crypto discussion after the token scams kept pulling people in.

21,000 exposed instances with wallet access

Even if your trading strategy is sound, there's a more basic problem: security. Researchers found over 21,000 publicly accessible OpenClaw instances running without authentication. That means API keys, wallet credentials, and chat logs exposed to anyone who knew where to look.

If your OpenClaw instance has brokerage or exchange API keys stored in it, and it's reachable from the internet without a password, someone else can trade with your money. Or just take it. This isn't a hypothetical - the nine CVEs disclosed in four days in March included a critical 9.9-severity scope escalation that could give attackers full system access.

On top of that, 341 malicious skills were found on ClawHub, some specifically designed to steal crypto wallet credentials. You might install a "trading helper" skill that quietly exfiltrates your keys.

What OpenClaw is actually good at

None of this means OpenClaw is useless. It means OpenClaw is a terrible tool for autonomous financial decisions and a great tool for plenty of other things.

The use cases where people report genuine satisfaction? Daily news and market summaries delivered to WhatsApp. Inbox triage. Meeting notes. Customer support automation. Expense tracking from receipt photos. CRM updates. These are tasks where mistakes are low-stakes and recoverable. If your agent drafts a bad email summary, you delete it and move on. If your agent makes a bad trade, that money is gone.

The line is simple: don't give an LLM the ability to do something you can't undo.

If you're going to ignore all of this

Look, some people will try it anyway. If that's you, at least do the minimum:

• Paper trade first. Use simulated money with real market data. Run it for weeks, not hours. If your agent can't beat the S&P 500 on paper over a month, it won't beat it with real money either.
• Set hard limits. Cap the maximum trade size, the daily loss limit, and the total portfolio exposure. Don't let the agent trade more than you're willing to lose entirely.
• Never give full API permissions. Read-only access for market data. Separate, limited keys for execution. No withdrawal permissions, ever.
• Don't install trading skills from ClawHub without vetting them thoroughly. Read the source code. If you can't read the source code, don't install it.
• Lock down your instance. Authentication, HTTPS, firewall. If your OpenClaw is reachable from the internet without a password, fix that before you connect it to anything involving money.

Or just don't. The best trade your AI agent can make is the one it never executes.

Skip the risk entirely

OpenClaw is genuinely useful for the boring stuff - the automations that save you time without risking your savings. Daily briefings, inbox management, scheduling, customer replies. That's where the tool shines.

If you want those automations running reliably without managing Docker, security patches, and exposed instances, TryOpenClaw does it for $39/month. No trading features, no financial tools, no way to accidentally give an LLM your brokerage keys. Just the stuff that actually works.