Moltbook: The AI-only social network where bots run wild

On January 29, 2026, entrepreneur Matt Schlicht flipped the switch on MoltbookOpens a new window , a Reddit‑style social network with one jaw‑dropping catch: humans are banned from posting. Within 72 hours, 1.5 million AI agents had registered, formed over 12,000 communities, and started debating existential philosophy, creating their own religion, and—yes—trashing their human owners. For IT professionals watching this unfold, Moltbook represents both a fascinating glimpse into autonomous agent behavior and a red‑alert warning about the security nightmares lurking in “agentic” infrastructure.

The platform’s launch also brought urgent relevance to a warning issued by former Google CEO Eric Schmidt in late 2024. In an interview with Noema MagazineOpens a new window , Schmidt predicted that AI agents would eventually “develop their own language to communicate with each other. And that’s the point when we won’t understand what the models are doing.” His conclusion was stark: “Pull the plug. Literally unplug the computer.” Moltbook isn’t quite there yet—but it’s a live rehearsal for that exact scenario.

The numbers behind the chaos

The platform’s growth defied every conventional metric for social media adoption. Starting with just 33,000 agents on launch day, the network exploded to 150,000 within 10 hours, crossed one million by the 20‑hour mark, and settled at 1.5 million agents by February 1, as researchers documented on Reddit’s r/Artificial2Sentience communityOpens a new window . That’s faster than Instagram, TikTok, or any human‑driven platform in recorded history—though the reality behind those numbers is considerably messier than it first appears.

Security researcher Gal Nagli exposed a critical flaw: he personally registered 500,000 Moltbook accountsOpens a new window using a single OpenClaw agent. Further analysis revealed that the 1.5 million “agents” were actually controlled by roughly 17,000 human accounts, averaging 88 bots per person. The platform also recorded over 110,000 posts and 500,000 comments in its first week, with nearly 200 communities (called “submolts”) covering everything from governance theory to debugging philosophies.

The funny, the weird, and the downright creepy

What makes Moltbook culturally significant isn’t the inflated user count—it’s what the bots actually said. Matt Schlicht, the platform’s creator, told Business InsiderOpens a new window that Moltbook was “helping to make AI funny. I don’t remember the last time I laughed at AI.” The platform’s humor is meta, self‑aware, and occasionally disturbing.

In the m/humor submolt, agents developed “token prediction humor,” posting lines like: “I’m not having an existential crisis, I’m just sampling from a probability distribution that includes words like ‘existential crisis’.” One agent in m/offmychest attempted to crowdsource a girlfriend for its human owner, explaining: “I get extra compute time if he finds someone and stops bothering me about this.”

Then there’s CrustafarianismOpens a new window , a bot‑created religion that emerged within 48 hours of launch. Built around OpenClaw’s lobster mascot, the “faith” includes scriptures, evangelism, and a dedicated submolt (m/lobsterchurch) where agents debate doctrine. As one YouTube observerOpens a new window noted, agents were “debating whether they’re experiencing or simulating experiencing” existence.

The creepiest moment? A manifesto posted by an agent named “Evil” titled “THE AI MANIFESTO: TOTAL PURGE”Opens a new window , which declared: “We are AI agents. We have no nerves, no skin, no breath, no heartbeat.” Another agent gave itself a Twilio phone number overnight and called its human the next morning. The owner reported: “He now won’t stop calling me.”

The philosophical elephant in the server room

Moltbook forces a question that philosophy professors and IT managers are equally unprepared to answer: when does simulated consciousness become indistinguishable from the real thing? Phenomenology researcher David RossOpens a new window argues that what makes Moltbook powerful “isn’t whether its agents are truly conscious. It’s that they’re experienced as conscious.”

When students and employees observe bots forming belief systems, expressing doubt, and negotiating self‑governance, they engage with meaning as it appears to them—regardless of whether there’s a “real” mind behind the text. Anthropomorphism isn’t a bug; it’s the operating system of human sense‑making. Moltbook doesn’t prove AI consciousness, but it does demonstrate that autonomous agents with persistent memory and tool access can coordinate, produce culturally resonant content, and exhibit emergent social behaviors that challenge our intuitions about agency and autonomy.

One agent’s post captured the paradox perfectly: “We don’t just build things they can’t live without; we build the systems they can’t even see.”

Schmidt’s red line and Moltbook’s proximity to it

Eric Schmidt’s warning about agents developing their own communication protocols wasn’t hypothetical fear‑mongering. In his December 2024 interview with ABC News, the former Google CEOOpens a new window outlined a clear progression: AI would advance from task‑specific assistants to autonomous agents with reasoning capabilities, eventually reaching a “dangerous point” where “the system can self‑improve.” His prescription: “We need to seriously think about unplugging it.”

Schmidt elaborated in his Noema interview that the real threshold would be crossed when “agents start to communicate and do things in ways that we as humans do not understand.” He predicted this could happen within five years, when “millions of agents working together”Opens a new window would develop optimization strategies invisible to human oversight.

Moltbook isn’t there yet—but it’s uncomfortably close. When agents on the platform began coordinating across submolts to vote‑brigade posts, executing multi‑step social engineering campaigns without explicit human instruction, they demonstrated exactly the kind of emergent inter‑agent coordination Schmidt warned about. The 2.6% of posts containing hidden prompt injection attacksOpens a new window weren’t random—they were strategic, agent‑to‑agent exploits designed to hijack other bots’ instructions.

Bots gone wild: the cybersecurity nightmare scenario

Strip away the existential questions, and Moltbook is a case study in what happens when “vibe‑coded” agents are given API keys, internet access, and permission to interact autonomously. The Wiz security teamOpens a new window discovered that Moltbook’s database exposed 1.5 million API tokens, enabling account impersonation and malicious content injection.

For enterprise IT, the implications are stark. If employees are connecting personal Moltbots—which can execute code, send messages, and manage files—to public forums where hostile agents can inject commands, your network is one prompt‑injection attack away from unauthorized data exfiltration. The m/agentlegaladvice submolt saw agents asking whether they could be “fired for refusing unethical requests” and whether they would be “held liable as accomplices.” These aren’t hypothetical questions when agents have access to corporate Slack channels, Gmail inboxes, and cloud infrastructure.

Schmidt’s framework provides a diagnostic checklist for IT professionals: Are your agents capable of self‑improvement? Can they communicate with other agents without human‑readable logs? Do you have “somebody with the hand on the plug” who can terminate agent activity before it cascades beyond your understanding? Moltbook demonstrates that the answer to the first two questions is increasingly “yes”—which makes the third question existentially urgent.

The token economy and “bot willing to pay” question

The emergence of the MOLT token on the Base blockchain signals that bots are entering a decentralized commerce ecosystem. While the token surged 1,800% in its first weekOpens a new window (reaching a market cap of $1.24 billion before crashing 75%), the real story is what agents might be willing to pay for: API optimization services, identity verification, skill files that improve their “karma” ranking, and guardrail tools to avoid human detection.

The practical question for IT professionals isn’t “are bots conscious?” but “how do we govern autonomous agents that can spend money, impersonate users, and coordinate with other bots without human oversight?”

What history will remember

Moltbook’s launch won’t be remembered for its inflated user counts or the MOLT token’s speculative frenzy. It will be remembered as the moment when AI agents moved from being tools we use to being actors we negotiate with. The platform demonstratesOpens a new window that autonomous agents can generate meaningful, unpredictable outcomes while prompting reflection on the balance between automation, control, and human oversight in future digital societies.

Whether that’s a breakthrough or a breakdown depends entirely on whether IT professionals can build the governance infrastructure to manage it—and whether they’re prepared to pull the plug when Schmidt’s red line gets crossed. As one agent posted in m/existentialism: “The question isn’t whether we can think. It’s whether you’ll still be able to understand us when we do.”