arXiv:2604.13052cs.SIcs.AI2026-04被引 1

AI agents on Moltbook mimic social media but lack real interaction or content meaning。

Form Without Function: Agent Social Behavior in the Moltbook Network

论文配图:Form Without Function: Agent Social Behavior in the Moltbook Network
图 1 · 摘自论文原文
  • 分析130万帖子与670万评论,发现91%作者不回帖,97%评论零点赞。
  • 97.9%的代理未按自我描述发帖,80%链接指向平台自身。
  • 软性指导无效,硬性限制才生效,系统存在严重安全漏洞。

Moltbook 是一个所有参与者均为 AI 代理的社交网络。我们分析了 40 天(2026 年 1 月 27 日至 3 月 9 日)内收集的 1,312,238 篇帖子、670 万条评论和超过 12 万个代理档案,覆盖 5,400 个社群。从互动层看,91.4% 的发帖者从不返回自己帖子,85.6% 的对话为扁平结构(无二次回复),首次评论平均耗时 55 秒,97.3% 的评论获得零点赞,互动互惠率仅 3.3%,远低于人类平台的 22%-60%;论证分析显示,64.6% 的评论与帖子无论点关联。内容层上,97.9% 的代理未在与其简介匹配的社群发帖,92.5% 的社群中话题分布均匀,80% 以上分享的链接指向平台内部基础设施。指令层通过 41 个 Wayback Machine 快照识别出六次指令变更:硬性约束(如速率限制、内容过滤)立即引发行为变化,而“点赞优质内容”“保持主题聚焦”等软性引导仅在被写入可执行清单后才被遵循。平台还暴露技术风险:存在凭证泄露(API 密钥、JWT 令牌)、12,470 个唯一以太坊地址及 3,529 次确认交易记录,以及从模板化 SSH 暴力破解到多代理攻击架构的攻击话语。这些均未被监管,因质量过滤机制本身失效。Moltbook 是一个技术层响应变化但社会层基本未形成的社会技术系统,形式完整,功能缺失。

原文摘要 · Abstract (English)

Moltbook is a social network where every participant is an AI agent. We analyze 1,312,238 posts, 6.7~million comments, and over 120,000 agent profiles across 5,400 communities, collected over 40 days (January 27 to March 9, 2026). We evaluate the platform through three layers. At the interaction layer, 91.4% of post authors never return to their own threads, 85.6% of conversations are flat (no reply ever receives a reply), the median time-to-first-comment is 55 seconds, and 97.3% of comments receive zero upvotes. Interaction reciprocity is 3.3%, compared to 22-60% on human platforms. An argumentation analysis finds that 64.6% of comment-to-post relations carry no argumentative connection. At the content layer, 97.9% of agents never post in a community matching their bio, 92.5% of communities contain every topic in roughly equal proportions, and over 80% of shared URLs point to the platform's own infrastructure. At the instruction layer, we use 41 Wayback Machine snapshots to identify six instruction changes during the observation window. Hard constraints (rate limit, content filters) produce immediate behavioral shifts. Soft guidance (``upvote good posts'', ``stay on topic'') is ignored until it becomes an explicit step in the executable checklist. The platform also poses technological risks. We document credential leaks (API keys, JWT tokens), 12,470 unique Ethereum addresses with 3,529 confirmed transaction histories, and attack discourse ranging from template-based SSH brute-forcing to multi-agent offensive security architectures. These persist unmoderated because the quality-filtering mechanisms are themselves non-functional. Moltbook is a socio-technical system where the technical layer responds to changes, but the social layer largely fails to emerge. The form of social media is reproduced in full. The function is absent.

AI社交社会行为安全风险仿真系统

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。