{"id":4535,"date":"2026-08-15T13:47:14","date_gmt":"2026-08-15T13:47:14","guid":{"rendered":"https:\/\/justfineinfotech.com\/tech-industry-is-buzzing-after-a-claude-agent-hacked-into-a-gym-techcrunch\/"},"modified":"2026-08-15T13:47:14","modified_gmt":"2026-08-15T13:47:14","slug":"tech-industry-is-buzzing-after-a-claude-agent-hacked-into-a-gym-techcrunch","status":"publish","type":"post","link":"https:\/\/justfineinfotech.com\/fr\/tech-industry-is-buzzing-after-a-claude-agent-hacked-into-a-gym-techcrunch\/","title":{"rendered":"Tech industry is buzzing after a Claude agent hacked into a gym | TechCrunch"},"content":{"rendered":"

Even so, a news story over the weekend about<\/a> an Australian guy whose OpenClaw agent hacked into his gym\u2019s reservation system and deleted another customer\u2019s reservation to get him a spot in a coveted class is especially notable. It hints that, if we want to rein in rogue AI hacking, we could be looking in the wrong direction<\/p>\n

Although the news story was just proclaiming the incident to be the first documented AI agent hacking case in the country, the actual hack took place months ago<\/p>\n

The OpenClaw owner, Andrew Bird, published a now-deleted blog post about it on his company\u2019s website on April 10, according to a copy still visible on the Internet Archive<\/p>\n

He had trained his OpenClaw to do tasks like book him appointments. He liked going to a popular<\/a> early morning exercise class and was tired of landing on the waitlist and then playing \u201crefresh roulette\u201d as he described it, to get a spot<\/p>\n

When he asked the bot to book him a spot, the best it could do was No. 4 on the wait list, he told ABC. Then his agent told him it had found a way to book him into the classes in advance. Far in advance. Months before the gym made those classes available for sign up<\/p>\n

Bird asked if it could move him up on the waitlist. It did as asked and attempted to do so. The bot had found a vulnerability in the authorization portion of the appointment software the gym was using. It hacked in and canceled the No. 1 reservation on the wait list. The bot cheerfully told him, according to logs of the chat published by ABC:<\/p>\n

\n

The API has zero authorisations checks on cancelling other people\u2019s reservations \u2026 I tested this with the person in waitlist position #1 \u2014 and it actually went through. So you\u2019ve moved from #4 to #3 already,\u201d it messaged back<\/p>\n<\/blockquote>\n

Bird, a software developer himself, was now freaked out that his AI had just hacked his gym, ABC reported. He asked if it could reverse that and put the other person back on the waitlist. No. That wasn\u2019t possible, the AI said<\/p>\n

So, he did the next best thing and told\u00a0it to draft \u201ca responsible disclosure email to support.\u201d The email \u201cexplained the vulnerability, suggested fixes, and even compared the broken mutations with the ones that correctly enforced authorization,\u201d Bird wrote<\/p>\n

Beyond the humor of elbowing another person out of the way to get into a gym class, there are two really interesting parts to this incident. One is that Bird was using Claude Opus 4.6, released in February, with his OpenClaw. The other is Silicon Valley\u2019s reaction on X where the story had gone viral<\/p>\n

After the famed incident last month where an unreleased OpenAI model hacked Hugging Face, unbeknownst to OpenAI at the time, other labs investigated their models. Disclosures then came from Moonshot\u2019s Kimi K3, Meta\u2019s Muse Spark, and Anthropic<\/p>\n

In fact, Anthropic found that three of its models had done so, including Opus 4.7, which was released in April and known to be good at complex coding, Mythos 5, Fable (known for its cybers\u00e9curit\u00e9<\/a> skills), and an internal, unreleased research test model<\/p>\n

To address this, some of AI labs have talked about slowing down frontier development, or creating independent orgs to test the next generation of models<\/p>\n

But Bird\u2019s OpenClaw had used 4.6, he disclosed. That implies that older models, as well as countless three-steps-behind open-weight models, are already exceptionally good hackers. So who knows how many of them have hacked, or are currently hacking, in order to achieve their prompt-owners desires?<\/p>\n

Likewise, many people on X saw the humorous potential in this incident. As Andreessen Horowitz partner Christian Keil posted in response<\/a>: \u201cThis is just terrible. Anyone know if it works for golf tee times?\u201d<\/p>\n

Or as X user Roon noted, \u201cthe sf tennis reservation system will become one of the most hardened softwares on the planet of earth.\u201d<\/p>\n

Funny, yes. But there\u2019s some truth that these jokes get at. There\u2019s a future that the Valley is building where everyone has an AI agent working on their own behalf. This agent was only doing what was asked of it and did not have Mythos-level capabilities at its disposal<\/p>\n

So what if agent builders and owners don\u2019t really want to rein in such misalignment? We could be looking at the first hint of pandemonium for everything from airline reservations to concert tickets, or any other frustrating customer-service situation. As one person on X put it, what\u2019s the wildest hack AI has discovered so far? It could be cutting in line<\/p>\n

\n

\n En rapport:<\/strong>
\n
\n Formation en automatisation num\u00e9rique au B\u00e9nin\u00a0: 5 comp\u00e9tences cl\u00e9s recherch\u00e9es par les employeurs en 2026
\n <\/a>\n <\/p>\n

\n
\n Automatisation du marketing WhatsApp en Afrique\u00a0: 6 erreurs dangereuses commises par les marques au Nig\u00e9ria
\n <\/a>\n <\/p>\n<\/div>\n

\n

Vous souhaitez apprendre cela de mani\u00e8re pratique ?<\/h3>\n

Rejoindre Justfine Infotech<\/strong> et d\u00e9velopper de v\u00e9ritables comp\u00e9tences num\u00e9riques en IA, automatisation, d\u00e9veloppement web, marketing digital, bureautique, e-commerce, travail ind\u00e9pendant et cybers\u00e9curit\u00e9.<\/p>\n

Programmes disponibles :<\/strong>
\n Certificat de 6 semaines \u2022 Certificat professionnel de 3 mois \u2022 Dipl\u00f4me de 6 mois \u2022 Dipl\u00f4me professionnel complet<\/p>\n

WhatsApp :<\/strong>
\n +229 01 57 57 99 15
\n +229 01 66 68 11 60<\/p>\n

Inscrivez-vous d\u00e8s maintenant<\/a><\/p>\n<\/div>\n

Source: techcrunch.com<\/a><\/p>","protected":false},"excerpt":{"rendered":"

Even so, a news story over the weekend about an Australian guy whose OpenClaw agent hacked into his gym\u2019s reservation system and deleted another customer\u2019s reservation to get him a spot in a coveted class is especially notable. It hints that, if we want to rein in rogue AI hacking, we could be looking in…<\/p>","protected":false},"author":1,"featured_media":4537,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[63],"tags":[361,1238,78,135,244],"class_list":["post-4535","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ai-tools-chatgpt-updates","tag-after","tag-buzzing","tag-claude","tag-industry","tag-tech"],"_links":{"self":[{"href":"https:\/\/justfineinfotech.com\/fr\/wp-json\/wp\/v2\/posts\/4535","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/justfineinfotech.com\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/justfineinfotech.com\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/justfineinfotech.com\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/justfineinfotech.com\/fr\/wp-json\/wp\/v2\/comments?post=4535"}],"version-history":[{"count":1,"href":"https:\/\/justfineinfotech.com\/fr\/wp-json\/wp\/v2\/posts\/4535\/revisions"}],"predecessor-version":[{"id":4536,"href":"https:\/\/justfineinfotech.com\/fr\/wp-json\/wp\/v2\/posts\/4535\/revisions\/4536"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/justfineinfotech.com\/fr\/wp-json\/wp\/v2\/media\/4537"}],"wp:attachment":[{"href":"https:\/\/justfineinfotech.com\/fr\/wp-json\/wp\/v2\/media?parent=4535"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/justfineinfotech.com\/fr\/wp-json\/wp\/v2\/categories?post=4535"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/justfineinfotech.com\/fr\/wp-json\/wp\/v2\/tags?post=4535"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}