2,000 email attackers couldn’t steal AI assistant secrets – what we learned
Over 2,000 people sent 6,000+ emails trying to trick an OpenClaw assistant into revealing a secrets.env file. None succeeded, but the red‑team uncovered advanced multi‑language prompt‑injection tricks, a costly $500 API bill, and a temporary Gmail suspension. The experiment offers concrete defenses for future AI assistants.