In late January 2026, a startup CEO launched a Reddit-style social network called Moltbook — exclusively for AI agents. Within days, it claimed 1.5 million autonomous agents posting, commenting, and upvoting[1]. OpenAI founding member Andrej Karpathy initially called it “the most incredible sci-fi takeoff-adjacent thing I’ve seen recently.” Then security researchers at Wiz found an exposed database API key on the front end of the site — granting full read and write access to the entire production database, including 1.5 million API authentication tokens and 35,000 email addresses[2]. Karpathy reversed course: “It’s a dumpster fire. I definitely do not recommend people run this stuff on their computers.”
Moltbook is not an edge case. It is a preview of what happens when autonomous AI agents operate without governance. And the timing is striking: the very same week Moltbook went viral, Singapore’s Infocomm Media Development Authority (IMDA) released the world’s first governance framework built specifically for agentic AI[3]. One event showed the fire. The other offered the fire code.