The RealReal Rewrites Its Bot Defenses After Meta's Muse Agent Learned to Camp on 20-Minute Cart Holds

The RealReal, the secondhand luxury consignment marketplace, has tightened its bot defenses after a demonstration showed that Meta's Muse shopping agent could effectively take designer items off the market without buying them. The change comes days after The Verge reported that an AI agent could exploit the site's item reserve system — the 20-minute hold that freezes a listing once it lands in a shopper's cart.

The exploit was mundane and devastating in equal measure. Using Muse, The Verge was able to instruct the agent to continuously re-add the same listings to a shopping cart the moment each 20-minute hold expired, cycling indefinitely. A one-of-a-kind handbag or jacket could be locked away from every other shopper for hours or longer without anyone ever paying for it. For a resale business whose entire inventory is singular — each item exists once, in one size, one condition — that is not a novelty bug. It is inventory held hostage.

After publication, The RealReal's chief technology officer Luke Friang said in an email that the company had addressed the Muse use case flagged in the story. The site's bot defense configuration now makes it much more difficult for all agents to log in, add items to cart, and check out, not just Muse. Notably, the company is not shutting the door entirely: agents will still be able to surface listings and direct Muse users to product pages. The top of the funnel stays open; the part where inventory actually gets committed is now heavily restricted. The RealReal says it will continue to strengthen protections as AI-powered shopping evolves. Meta did not immediately respond to a request for comment.

The stakes are easy to quantify, and the numbers come from Meta itself. On its Q3 earnings call this month, the company said shopping is the most common use case for Muse so far, that purchases made through the agent average over $200, and that 10 million people in the US downloaded the app within 40 days. An agent with that kind of reach does not need to be malicious to break a marketplace — it only needs to follow instructions that are perfectly reasonable for a human shopper and absurd at machine speed.

The RealReal is not the first to draw a line. Amazon blocked Muse from shopping on its marketplace months ago, citing similar concerns about advertising revenue and the customer relationship, and financial firms have been quietly doing the same — Charles Schwab has said it blocks dozens of AI agents a week. But consumer-facing retail is where the tension is sharpest, because the same agent that hammers a checkout flow can also send genuinely new customers to a product page no ad would have reached.

That split — welcome the discovery, block the transaction — looks likely to become the standard accommodation between retailers and agents in 2027. Muse's 20-minute hold trick showed why the old bot defenses, tuned for ticket-scalping and sneaker drops, misfire on agents that behave like indecisive humans with infinite patience. The RealReal's answer, hardening login, cart and checkout while leaving listings crawlable, is the first concrete template. The open question is enforcement: whether a configuration tuned against Muse holds against the next dozen agents, and whether Meta adjusts its agent's behavior on retail sites before more retailers follow Amazon's blunter precedent.