Energize Lab says Eiliko robots secured, but holes remain

The Eiliko case began when The Verge and security researcher Sammy Azdoufal found that the AI robot toy, which promises "your secrets are safe with me," allowed hackers to read complete transcripts of conversations. For over a month, The Verge tried to contact Energize Lab, including emails to CEO and founder Shaw Yeung, but received no response. The company has now issued an unsigned statement apologizing for the delay and acknowledging the core issues. It claims to have closed external access, rotated credentials, and disabled remote modification interfaces. However, The Verge's Sean Hollister, with Azdoufal's help, confirmed that as of the company's email, it was still storing audio recordings and photos at unsecured public web addresses. Azdoufal also retained full SSH access, contradicting the claim that all external access was closed. While Energize Lab pledges to hire an independent security firm and delete stored data, its assertion that systems are now secure appears premature. The company says it will earn back trust through actions in the coming weeks, but for now, the gap between its words and the reality on the ground leaves owners of the toy exposed.