Dax Raad

Headlines · 1

1. 2d
   OpenCode Console breach exposes 1.4% of users' API keys

   OpenCode confirmed on October 17 local time that an old system being decommissioned was accessed without authorization, affecting about 1.4% of OpenCode Console users whose stored third-party API keys for OpenAI, Anthropic and Google may have leaked; the company emailed affected users and said it was working with the three model providers on remediation. Multiple developers reported unexpected charges, including a $400 Anthropic bill and in one case more than $1,700 in a single day; Anthropic reportedly revoked suspected leaked Claude keys, and an OpenAI team member said credits improperly consumed during the attack would be fully refunded. OpenCode linked the incident to a "large-scale distillation attack," but developers and researchers questioned that framing because it does not explain how the credentials were obtained, and no full incident report has been published.

   testingcatalog (X) · 🔥 47

Experience and discussion from the community

Share my Dax Raad experienceAsk about Dax Raad