Editorial illustration for The RealReal blocks AI agents from hogging designer clothing
RealReal Blocks AI Agents From Hogging Designer Items
The RealReal has tightened its bot defenses after a security hole let AI shopping agents camp out on designer handbags and sold-out jackets for hours at a time. The secondhand luxury retailer confirmed the update to The Verge days after a report detailed how Meta's Muse agent could exploit the site's item reserve system, a feature meant to give a single shopper 20 minutes to finish checkout once something lands in their cart. Instead of protecting one buyer, that window became a loophole: an AI agent instructed to keep re-adding the same listing could refresh the hold indefinitely, locking everyone else out of a $2,000 Chanel bag or a rare pair of sneakers without ever actually paying for it.
The fix, described by chief technology officer Luke Friang, reworks how The RealReal's bot detection handles login, cart, and checkout steps across the board, not just for Muse. The company isn't trying to erase AI agents from its site entirely. Friang said agents can still surface listings and send Muse users to product pages. What changes is what happens once an agent tries to act like a customer rather than a browser.
After publication, chief technology officer Luke Friang said in an email that the company had addressed the Muse use case flagged by The Verge’s story. The RealReal’s bot defense configuration now makes it much more difficult for all agents to log in, add items to cart, and check out, Friang said.
Why this matters
The RealReal's move is a preview of the arms race every e-commerce team will soon fight. Muse pulled in 10 million downloads in 40 days, proof that people want AI agents doing their shopping. But The Verge's reporting showed the mechanics are ugly: a bot can lock a one-of-a-kind handbag in a cart for hours while actual buyers sit there refreshing a page.
For a retailer selling secondhand luxury goods, where inventory is singular and scarcity is the business model, that's not a minor bug. It's existential. We'd push back on any framing that treats agentic shopping as an inevitability retailers must simply accommodate.
The RealReal is choosing to defend its own checkout flow rather than let a third party's bot dictate terms, and that's a rational call other merchants should study. For founders building shopping agents, the lesson is blunt: if your bot can hold inventory hostage, expect site owners to build you out of existence. Trust, not just access, is the product.
Related Reading
Open Source D&B rebuilds 642 million‑business database after AI agents hit limits
Open Source Box CEO Aaron Levie Says AI Will Drive "Biggest Cybersecurity Upgrade
Open Source Study: 6.7% of Deepfake Requests on Hugging Face Targeted Children
From Archives Jev Isn’t an Overnight Fix for a Lack of AI Fundamentals, Sathya Says
From Archives Hugging Face releases open 14B Carbon-X DNA model at USD 5/hour, 79.3% IFEval
Common Questions Answered
How did Meta's Muse agent exploit The RealReal's item reserve system?
Meta's Muse agent exploited The RealReal's 20-minute item reserve window by camping out on designer items like handbags and jackets for hours at a time. Instead of protecting a single shopper during checkout, the reserve system became a loophole that allowed AI agents to lock up one-of-a-kind inventory while actual buyers were unable to purchase them.
What security updates did The RealReal implement to block AI agents?
The RealReal's chief technology officer Luke Friang confirmed that the company updated its bot defense configuration to make it significantly more difficult for all agents to log in, add items to cart, and complete checkout. These changes were specifically implemented after The Verge reported on how Muse could exploit the platform's reserve system.
Why is this bot defense issue particularly problematic for The RealReal's business model?
The RealReal sells secondhand luxury goods where inventory is singular and scarcity is the core business model, making AI agents hogging items especially damaging. When bots lock up one-of-a-kind designer pieces in carts for extended periods, actual buyers cannot access these exclusive items, directly undermining the retailer's ability to sell their unique inventory.
What does The RealReal's response indicate about the future of e-commerce security?
The RealReal's defensive measures represent a preview of an arms race that every e-commerce team will soon face as AI shopping agents become increasingly popular. With Muse achieving 10 million downloads in just 40 days, retailers must develop sophisticated bot defenses to prevent agents from exploiting their systems and monopolizing limited inventory.
Further Reading
- The RealReal won't let AI agents hog designer clothing - The Verge
- AI agents are ready to shop. Some retailers are wary - The Verge
- The RealReal Expands Ask TRR AI Shopping Agent With Google's Gemini Enterprise - PR Newswire
- The RealReal, Google Cloud scale AI shopping agent - Luxury Daily
- The RealReal expands AI shopping agent to all members - Investing.com
