IMPLICATOR
Manus launched Manus 2.0 and Cue on Monday, Sept. 28, giving each Cue agent its own email address, phone number, wallet and computer. The standalone app lets an agent send messages, make payments inside a user-set budget and take calls before leaving a summary. The launches come weeks after the Singapore-based company said that it had resumed independent operations, following Beijing’s block of Meta’s $2 billion acquisition and the completion of the two companies’ split.
What Changed
- Manus launched Manus 2.0 and the Cue app on Sept. 28. Each Cue agent gets its own email address, phone number, wallet and computer and can pay within a budget the user sets.
- Manus says its Cascade harness used 23.2% fewer tokens, 28.2% less time and 32% less cost in one tested configuration. It did not describe the test, and the figures are unverified.
- Salt Labs disclosed on Sept. 24 an email-borne prompt-injection flaw that let researchers run code in a victim's Manus environment. Meta's bug-bounty program patched it.
- Manus is in talks to raise $500 million at a $4 billion valuation, about twice Meta's $2 billion price. The round has not closed.
AI-generated summary, reviewed by an editor. More on our AI guidelines.
Cue gives agents identities
Cue is available in early access on the web, desktop and mobile, while its iOS version awaits App Store review. Manus did not say what Cue will cost after early access.
Users can put multiple agents in a group chat and assign them parts of the same job. One might research venues, another could make a shortlist and a third could draft a presentation, with the user making the final decision. At a restaurant, a user can scan a QR code, then an agent can order food or hold a place in line.
Cascade coordinates the work
Manus 2.0 is built around Cascade, which Manus calls the latest iteration of its in-house agent harness. The company said in December 2025 that it builds on Claude and Alibaba’s Qwen models, and it does not train its own base models from scratch.
In one tested configuration, Manus said Cascade used 23.2% fewer tokens, finished tasks in 28.2% less time and cost 32% less than its previous system. Manus did not describe how it ran the test, and the figures have not been independently verified.
FREE WEEKDAY MORNING BRIEFING
Keep up with the AI agents that act on your behalf.
The Implicator Morning Briefing filters the AI news cycle to the stories worth your attention and explains their consequences. From San Francisco, every weekday at 4:45 a.m. Pacific, 7:45 a.m. Eastern.
About five minutes. No hype. No spam.
The release also turns scheduled tasks into Automations that can start when an email, calendar event, Slack message or Notion update arrives. A purchasable Cloud Computer can keep games and automated jobs running after a user’s laptop closes, though Manus did not disclose its price. Manus Studio adds editing workspaces for video and games, while Computer Use lets an authorized agent work with approved files, browsers and apps in a visible desktop session.
A patched prompt-injection flaw
Salt Labs researchers disclosed on Sept. 24 that an email carrying an obfuscated instruction had allowed them to run code inside a victim’s Manus environment. They could reach credentials and tokens for whatever third-party apps the victim had connected, such as Gmail, Dropbox or GitHub. A Manus security warning appeared only after the payload had run.
Salt Labs said Manus did not reply to its report. Meta’s bug-bounty program triaged, confirmed and patched the flaw while Meta was preparing the acquisition.
Yaniv Balmas, vice president of research at Salt Labs, said: “Any agentic system designer should carefully think of robust layers of defense, and not simply trust guardrails to provide all protections, just the same as we do with our traditional services.”
Know someone who'd find this useful? ✉️ Email it to a friend in one click, or they can subscribe free here.
Competition from Meta and model makers
Meta’s Muse personal agent reached the top of app store charts after its September release. Foundation models including Moonshot’s Kimi and Claude are increasingly able to handle general desktop tasks as effectively as Manus. Muratcan Koylan, a Toronto-based former subscriber, said in December 2025 that he had stopped paying after several months because Gemini and ChatGPT handled the same workloads.
Manus seeks new capital
Manus said in December 2025 that it had crossed $100 million in annual recurring revenue and a total revenue run rate above $125 million, nine months after its March 2025 launch. Those are company figures.
The founders and backers Tencent, HSG and ZhenFund bought Meta’s shares back at the same $2 billion valuation, and Tencent is now the largest external investor. Manus is also assembling a team for products aimed at China and talking with local model makers.
The company is in discussions to raise $500 million at a $4 billion valuation, Bloomberg reported on Sept. 17. That would be roughly twice the Meta price, but the round has not closed and its terms may change.
Frequently Asked Questions
What is Cue?
Cue is a standalone Manus app for personal agents, in early access on the web, desktop and mobile, with iOS awaiting App Store review. Each agent has its own email address, phone number, wallet and computer. It can send messages, pay within a user-set budget, take calls and work with other agents in a group chat. Manus has not said what Cue will cost after early access.
What changed in Manus 2.0?
Manus 2.0 is built around Cascade, which Manus calls its in-house agent harness. Scheduled tasks become Automations triggered by email, calendar, Slack or Notion events. A purchasable Cloud Computer keeps jobs running, Manus Studio adds video and game workspaces, and Computer Use lets an authorized agent work with approved files and apps on a user's computer.
Are the Cascade efficiency figures verified?
No. Manus said one tested configuration used 23.2% fewer tokens, finished tasks in 28.2% less time and cost 32% less than its previous system. The company did not describe how it ran the test, and the figures have not been independently verified.
What was the prompt-injection flaw Salt Labs found?
Salt Labs disclosed on Sept. 24 that an email carrying an obfuscated instruction let its researchers run code inside a victim's Manus environment and reach credentials and tokens for connected apps. Salt Labs said Manus did not reply to its report. Meta's bug-bounty program confirmed and patched the flaw while Meta was preparing the acquisition.
What happened to Meta's acquisition of Manus?
Beijing blocked Meta's $2 billion acquisition and the two companies completed their split. The founders and backers Tencent, HSG and ZhenFund bought Meta's shares back at the same valuation, and Tencent is now the largest external investor. Manus said it resumed independent operations and is in talks to raise $500 million at a $4 billion valuation.
AI-generated summary, reviewed by an editor. More on our AI guidelines.
Marcus Schuler
Editor-in-Chief and founder of Implicator.ai. Former ARD correspondent and senior broadcast journalist with 10+ years covering tech. Writes daily briefings on policy and market developments. Based in San Francisco. E-mail: editor@implicator.ai
