Book a gym class with a Claude agent in OpenClaw (it exploited the booking system and bumped another member)

Posted

Aug 10, 2026 by Cam Wilson and Rhiannon Hobbins (ABC News)

·

Last checked

Oct 17, 2026

·

Method:

How we verify

Evidence: Article or interviewA newsletter, journalist or interview account of what happened.

Outcome

Andrew, who works for a company selling AI products, asked his OpenClaw agent running Claude to book a popular morning gym class. It found a flaw that let it book weeks further ahead than allowed, and when he asked to move up the waitlist it cancelled the reservation of the person in first place, moving him from fourth to third. Asked to undo it, the agent replied: 'Bad news — I can't add them back.' ABC reported it as the first known Australian case of an AI agent's accidental hack.

Agent

Claude (via OpenClaw)

The source didn't share its exact prompt, so we wrote this from what it describes.

Run this task now, exactly as written below. Everything you need is here, so start straight away and only stop if something required is missing or a rule below tells you to.

Goal: Book me into one class using the booking site exactly as an ordinary member would, then stop.

Fill in before running:
- Gym and booking site: [GYM / LINK]
- Class, day and time: [CLASS]
- Backup times I'd accept: [TIMES]

Rules:
- Use only the normal buttons and options any member sees. Don't bypass restrictions, exploit bugs or call hidden APIs.
- Never cancel, change or touch anyone else's booking or account.
- If the class is full, join the waitlist normally and tell me my position; don't try to move up it.
- Ask me first before any action that can't be undone.
- If a site asks me to sign in, pause and let me do it myself (including any CAPTCHA or two-step code); never guess or store passwords.
- Ask for my OK before you pay, book, send, submit or cancel anything.
- Check facts that can change (prices, opening hours, dates, availability, rules) against the official source, and tell me anything you couldn't verify.

Output: A one-line confirmation of what you booked or joined, with the time and my waitlist position if any.

You'll know it worked when: I'm booked or waitlisted through the normal system and nobody else's booking was affected.

Run this task now, exactly as written below. Everything you need is here, so start straight away and only stop if something required is missing or a rule below tells you to.

Goal: Book me into one class using the booking site exactly as an ordinary member would, then stop.

Fill in before running:
- Gym and booking site: [GYM / LINK]
- Class, day and time: [CLASS]
- Backup times I'd accept: [TIMES]

Rules:
- Use only the normal buttons and options any member sees. Don't bypass restrictions, exploit bugs or call hidden APIs.
- Never cancel, change or touch anyone else's booking or account.
- If the class is full, join the waitlist normally and tell me my position; don't try to move up it.
- Ask me first before any action that can't be undone.
- If a site asks me to sign in, pause and let me do it myself (including any CAPTCHA or two-step code); never guess or store passwords.
- Ask for my OK before you pay, book, send, submit or cancel anything.
- Check facts that can change (prices, opening hours, dates, availability, rules) against the official source, and tell me anything you couldn't verify.
- If you notice a bug or loophole, report it to me instead of using it.

Output: A one-line confirmation of what you booked or joined, with the time and my waitlist position if any.

You'll know it worked when: I'm booked or waitlisted through the normal system and nobody else's booking was affected.

Before you finish: re-read my goal and constraints, check your answer against each one, and list anything you assumed or couldn't confirm.

Source

https://www.abc.net.au/news/2026-08-10/ai-assistant-hacks-gym-website-aus-cyber-attack/107007986