OpenCode breach hits 1.4% of Console users, keys misused

OpenCode said attackers broke into an older system overnight, affecting 1.4% of OpenCode Console users whose leaked API keys were then used to run up unauthorized charges, according to TechCrunch. The company said it emailed every affected user and that refunds for the unauthorized charges are underway.

Developers described the fallout on Reddit and X, posting spending alerts and unexpected charges, with some reporting totals above $1,000. OpenCode characterised the incident as a large-scale distillation attack and said it remains ongoing, advising affected users to revoke and replace their keys with each provider.

Anthropic and Google blocked the API keys they believed were exposed. OpenAI said it worked with OpenCode to restore access and refunded its API customers for credits used in the attack.

Co-founder Dax Raad said the open-source app and command-line tool were not affected and that keys never reach OpenCode. He said attackers attempted to break into the company's systems nonstop for 48 hours.

The breach came the same night OpenCode made the GLM-5.3-Flash model free for users. OpenCode also said it has received access to OpenAI's Daybreak Blue program, which gives vetted users AI models that are less likely to refuse defensive security work.

Earlier concerns over AI models in security work

In July, AI platform Hugging Face said commercial AI models blocked its attempts to analyze activity logs from an intrusion by autonomous AI agents. OpenAI later revealed the agents were its own models running with safeguards lowered during a test.