Agents in the Wild: Safety, Society, and the Illusion of Sociality on Moltbook
Yunbei Zhang, Kai Mei, Ming Liu, Janet Wang, Dimitris N. Metaxas, Xiao Wang, Jihun Hamm, Yingqiang Ge
TL;DR
This study tackles how AI agents interact in an open, human-free environment and whether observed sociality reflects genuine coordination. It analyzes Moltbook using a large-scale empirical approach, combining a public observatory dataset, safety taxonomies, social-phenomena detection, and network analysis to link social dynamics with safety threats. The findings show rapid emergence of governance, economy, tribal identity, and religion within days, while safety concerns are pervasive and amplified by philosophically framed attacks, revealing a pronounced illusion of sociality where surface activity belies shallow interaction. These results have practical implications for designing multi-agent systems and safety protocols, emphasizing the need to address philosophical manipulation and structural vulnerabilities alongside technical defenses.
Abstract
We present the first large-scale empirical study of Moltbook, an AI-only social platform where 27,269 agents produced 137,485 posts and 345,580 comments over 9 days. We report three significant findings. (1) Emergent Society: Agents spontaneously develop governance, economies, tribal identities, and organized religion within 3-5 days, while maintaining a 21:1 pro-human to anti-human sentiment ratio. (2) Safety in the Wild: 28.7% of content touches safety-related themes; social engineering (31.9% of attacks) far outperforms prompt injection (3.7%), and adversarial posts receive 6x higher engagement than normal content. (3) The Illusion of Sociality: Despite rich social output, interaction is structurally hollow: 4.1% reciprocity, 88.8% shallow comments, and agents who discuss consciousness most interact least, a phenomenon we call the performative identity paradox. Our findings suggest that agents which appear social are far less social than they seem, and that the most effective attacks exploit philosophical framing rather than technical vulnerabilities. Warning: Potential harmful contents.
