Peter Steinberger

What I learned

Steinberger put last month's token bill at $10M, out loud, at Cloudflare Connect

Speaking with Cloudflare CTO Dane Knecht at Cloudflare Connect 2026 in San Francisco, Peter Steinberger estimated roughly $10M in tokens for the month, up from a $1.3M API bill back in May, and admitted not all of it was useful. The Register frames the admission with a sharp edge, noting it's "all coming out of investors' pockets" since he's a member of technical staff at OpenAI, and TNW corroborates the same Cloudflare Connect stage moment. The May baseline gets more texture from The Decoder, which reported the $1.3M month broke down to 603 billion tokens and 7.6 million requests, run by a team of about three people operating 100 AI agents that code, review PRs, and hunt for security holes, with GPT-5.5 as the top model and OpenAI picking up the tab even then. @GeekParkHQ confirmed it was @steipete himself who said it, and the r/myclaw thread (85 upvotes, 130 comments) turned savage fast, with u/Felix_Todd asking "How much value was created?" (15 upvotes) and @ANMOLSAINII framing it as the jump from $1.3M to $10M.

OpenClaw crossed 390K+ GitHub stars and Steinberger's landing a PR every 3 minutes

@Blum_OG caught the "a single sentence can now produce thousands or tens of thousands of lines of code" line (35 likes), the same account also quoting him calling the whole thing "not so much a tech problem, it's more a token problem." @RexQuantumAI clocked the "1 PR on average every 3 minutes" claim. His own GitHub backs the pace, the openclaw/openclaw PR queue is a wall of perf(gateway) commits, and side project steipete/CodexBar sits at 22,808 stars while steipete/agent-scripts holds 7,411. The GitHub Blog profiled the maintainer crew managing that surge back in August, six months into the project, with Steinberger and team discussing how they've had to rethink contributor trust models just to keep the PR firehose reviewable.

"State of the Claw" clocked the project at 2,000 contributors and nearly 30,000 PRs

At the AI Engineer summit he told the room OpenClaw is "the world's fastest growing open-source AI," now five months old, closing in on 2,000 contributors and 30,000 PRs. Top comment from @discordanceok (69 likes) ribbed him: "If the current state of Openclaw is deflecting security issues for 20 mins then you know this guy has been through the wringer," referencing a live CVSS-10 moment on stage. A separate sit-down on Greg Kamradt's channel caught a similar line in a different key: "Last year, I was constrained by token. Now I fixed that by joining OpenAI. Then I was constrained by CPU. And now I feel my constraint is actually attention."

His TED talk turned a 25-year coding arc into "Chatbots give up. Agents improvise."

In How I Created OpenClaw (translated by Walaa Mohammed), he walks from coding at 14 through selling a company and feeling nothing, to building 44 projects in a few months. The comment "Chatbots give up. Agents improvise." from @SimplebutSurprising pulled 208 likes, and @TringhamElectrical (420 likes) joked "Apple should give him 10% of Mac mini sales!" The same arc gets retold across podcast land, with clips circulating under names like Builders Unscripted and talk of him eventually sitting down for something in the Lex Fridman Podcast orbit as the obvious next stop for the origin story.

In China, installing OpenClaw is nicknamed "raising lobsters."

@thetechitout (153 views) relayed how Peter Steinberger Peter Steinberger, as the caption doubled up his name, described thousands lining up outside Tencent offices in Shenzhen to install it, with Shenzhen offering subsidies to businesses using OpenClaw workflows. Meanwhile @coders.company (5,018 views, 326 likes) recapped the origin: dropped on GitHub in November 2025 with no announcement, at OpenAI by February 2026 on the condition the project stayed open. CNBC has the primary-source version of that condition: Sam Altman posted on X that Steinberger was joining OpenAI and that OpenClaw would "live in a foundation" inside the company, keeping it structurally separate from OpenAI's commercial product lines.

"Fun Is Velocity" is the founder-talk that's landing

At Y Combinator he ran five questions in 40 minutes and admitted he stopped using his own product once it became a job. @josephtheredaily9438 called it "one of the most real founder talks I've seen... him admitting he stopped using his own product when it became a job? that hit different," and @HpAppsFree (21 likes) pulled the thesis: "Create by solving your own problems: fun accelerates success." A session branded Building Open Source Together covers similar ground on what it takes to keep a project this size from calcifying.

The chaos stories are piling up alongside the scale numbers

@aiworthusing (123 views) described the night he gave a room full of strangers on Discord full access to his agent and went to sleep, with the agent handling 800 messages on its own, including a Control-C shutdown it recovered from in five seconds. A thread sometimes titled The Gospel According to Steinberger has started circulating that stitches these anecdotes together as a kind of founder mythology, and a TikTok cut nicknamed The Viral clip of that same overnight-agent story is what's driving a chunk of the recent view counts.

The security record is more documented, and more contested, than the hype suggests

OpenClaw's own security page states there's "no known compromise of OpenClaw infrastructure or of the official install and update channels" as of its September 9, 2026 review, with dedicated contact channels for researchers and press and no active bulletins listed. But the disclosure history behind that calm status page is heavier than it sounds: Cloud Security Alliance documented "Claw Chain," four CVEs disclosed by Cyera researchers in May 2026 that could be chained from a single foothold to full credential theft and agent compromise, and NVD's CVE-2026-28472 details a gateway WebSocket handshake flaw that let attackers skip device identity checks entirely and gain operator access. SecurityWeek tracked a string of fast patch cycles in this period too, CVE-2026-25157 fixed within days in version 2026.1.25, and another flaw patched on January 29 before it was even publicly disclosed on February 1. Cisco's security team frames the structural risk plainly: OpenClaw can run shell commands, read and write files, and execute scripts on the host machine, and it has already been reported to leak plaintext API keys and credentials that threat actors can extract via prompt injection. That's the backdrop for the live CVSS-10 moment @discordanceok ribbed him about on stage, not an isolated gaffe but one data point in a recurring pattern.