← Back to live feed1 story
OpenCode confirmed that a distillation attack compromised 1.4% of OpenCode Console users, leading to unauthorized charges after stolen API keys were used. The company notified affected accounts by email on Oct 17 and is working with Google, OpenAI, and Anthropic to remediate the ongoing incident. OpenCode stated it cannot share further details while the remediation process continues.
Sign in to suggest
Key sources
- SOURCE@opencode“security breach last night related to a large scale distillation attack that impacted 1.4% of OpenCode Console users”x.com
- SUPPORT@mattjay“people’s API keys are running up charges”x.com
- SUPPORT@mattjay“Confirmed. OpenCode hacked. Keys stolen.”x.com
- SUPPORT@mattjay“People waking up to the big bills”x.com
- SOURCEhuggingnewshuggingnews.com
- SOURCEtechmeme.com
- SOURCE@opencode“security breach last night related to a large scale distillation attack that impacted 1.4% of OpenCode Console users”x.com
- SOURCE@thsottiaux“worked with OpenCode to have their users who are also OpenAI API customers back in business and any credits refunded which would have been drawn in the attack”x.com