Fake Openclaw phishing for GitHub dey target crypto developers

OX Security dey warn about one "Fake Openclaw phishing" campaign wey dem dey target crypto developers for open-source ecosystem. Di attackers dey create fake GitHub accounts and dem go post "issue" threads wey dey claim say de victims don win $5,000 worth fake CLAW token. Di links dey lead to scam site wey nearly resemble di real one and di script go ask users make dem connect their wallets. Di main risk for this Fake Openclaw phishing na wallet approval and say bad transactions fit run after wallet don connect. Researchers don find di phishing infrastructure, including redirect to token-claw[.]xyz and command-and-control for watery-compost[.]today. Malicious JavaScript fit collect wallet/transaction data, change local storage, and make am hard to trace. As of di report, no confirmed victims yet, but dem talk say di campaign still dey active. At di same time, CertiK flag "skill scanning" vulnerabilities for di Openclaw ecosystem wey fit bypass existing security controls and widen di attack surface. For traders, expect headline risk around token-launch and wallet-connect events, wey fit cause short-term sentiment volatility and drop for local liquidity/DEX trading for affected tokens. Fake Openclaw phishing remain mainly scam threat, no be direct reason wey go affect broad market prices.