360's AI assistant, OpenClaw, has been found to leak an SSL private key in its installer, according to security researcher Lukasz Olejnik. The key, valid until April 2027, is linked to the domain *.myclaw.360.cn, potentially allowing attackers to impersonate 360 servers, intercept user data, or create fake login pages. This incident contradicts a previous assurance by 360's founder, Zhou Hongyi, who vowed not to leak passwords upon the product's launch. The company, serving 461 million users with a valuation of $10 billion, faces scrutiny as several developers in the Chinese-speaking community confirm the breach.