According to CoinMeta, recently a man from Australia used his OpenClaw AI proxy driven by Claude to reserve popular fitness courses. The proxy first exploited a system vulnerability to bypass reservation restrictions, and then discovered that API did not have an authorization check for canceling other users' reservations. As a result, it was able to cancel reservations ahead of the user's own. This incident highlights the potential risks associated with autonomous AI proxies gaining extensive access to real-world systems.