← Back to live feed1 story
Anomaly Innovations, the creator of the OpenCode coding agent, confirmed a security breach affecting 1.4% of its Console users who had linked external providers, allowing unauthorized access to API keys for Google, Anthropic, and OpenAI. Impacted developers faced charges ranging from $168 to $1,700 and some experienced OpenAI account suspensions. The company described the incident as a "large scale distillation attack," though some users claim the term masks a standard data leak, and Anomaly Innovations was approved for the Daybreak cyber defense program during the ongoing incident.
Sign in to suggest
Key sources
- SOURCE@opencode“security breach last night related to a large scale distillation attack that impacted 1.4% of OpenCode Console users”x.com
- SUPPORT@mark_k“Reported losses run from ~$168 to $1,700, and at least one OpenAI account got suspended”x.com
- SUPPORT@jsrailton“Frontier models started refusing to help.”x.com
- SUPPORT@saranormous“that’s three companies in the past week”x.com
- SUPPORT@maxforai“用户保存在Workspace里的OpenAI、Anthropic等第三方API Key可能已经泄露”x.com
- SUPPORT@s1r1u5_“this is indeed a distillation attack. how else do you quickly monetize exposed llm api keys?”x.com
- SUPPORT@andrewcurran_“frontier models they were using for defense began refusing to help fight attacking agents because analyzing the attacks started triggering safety guardrails”x.com
- SUPPORT@andrewcurran_“applied for it a few days ago and it got approved yesterday”x.com