OpenCode Console breach exposes 1.4% of users' API keys
OpenCode confirmed on October 17 local time that an old system being decommissioned was accessed without authorization, affecting about 1.4% of OpenCode Console users whose stored third-party API keys for OpenAI, Anthropic and Google may have leaked; the company emailed affected users and said it was working with the three model providers on remediation. Multiple developers reported unexpected charges, including a $400 Anthropic bill and in one case more than $1,700 in a single day; Anthropic reportedly revoked suspected leaked Claude keys, and an OpenAI team member said credits improperly consumed during the attack would be fully refunded. OpenCode linked the incident to a "large-scale distillation attack," but developers and researchers questioned that framing because it does not explain how the credentials were obtained, and no full incident report has been published.
The incident shows that keys held by a third-party cloud console can be drained directly at the model providers, so affected developers must revoke keys at the provider that issued them; changing a password or deleting local configuration does not invalidate credentials that already leaked.
Post
Post
🚨 AI News | TestingCatalog on X: "OpenCode published an official statement regarding a recent distillation attack. > Earlier today, OpenAI, Anthropic and Google balances of some OpenCode users got drained. > Reportedly, only 1.4% of users were affected and these users were notified via an email. This is a serious precedent because if this distillation vector is the simplest to execute, that means that major AI labs are now much more protected than they were earlier. This also means that using smaller providers is now less safe. Additionally, tokens from leading AI labs now have a higher value since they are harder to get for distillation. A wild AI west 👀"
- 🚨 AI News | TestingCatalog @testingcatalog OpenCode published an official statement regarding a recent distillation attack. > Earlier today, OpenAI, Anthropic and Google balances of some OpenCode users got drained. > Reportedly, only 1.4% of users were affected and these users were notified via an email. This is a serious precedent because if this distillation vector is the simplest to execute, that means that major AI labs are now much more protected than they were earlier. This also means that using smaller providers is now less safe. Additionally, tokens from leading AI labs now have a higher value since they are harder to get for distillation. A wild AI west 👀 OpenCode @opencode Oct 17 We had a security breach last night related to a large scale distillation attack that impacted 1.4% of OpenCode Console users We have notified them all this morning via email. If you did not get an email you were not impacted, it was a subset of users who had external providers Show more 7:15 PM · Oct 17, 2026·43.2K Views 58 19 462 69
- Mads @Laz01L 23h stuff like this is why im happy im on subscriptions and not api keys 4 557
- Arbaz @arb5z Oct 17 breach last night, email this morning. so the keys just kept burning all night? 3 832
#OpenCode#OpenCode Console#Anomaly Innovations#OpenAI#Anthropic#Google#Dax Raad#Lydia Hallie