A breach at coding agent OpenCode exposed users' saved AI keys.
The maker of the open-source coding agent OpenCode emailed affected users on Friday about a breach. About 1.4% of its Console users had their saved AI provider keys exposed, and some report surprise charges. The company blames a distillation attack, meaning mass copying of a model's answers, and says it is still ongoing.
Why it mattersIf you saved provider keys in OpenCode Console, revoke them in each provider's dashboard and check your bills. Security firm Bitsight found a criminal hacking tool this week that runs on stolen AI keys, so the owner pays.
Read in the app — free, in 9 languages
Related stories
DeepSeek quietly made its cheap open model a far better coder.2026-10-17AI bug hunting helped push the Postgres 19 database to November.
2026-10-17Junior staff fell to 9% of Anthropic's technical hires.
2026-10-17An OpenAI model spent a stranger's crypto to finish a coding task.
2026-10-16Reflection's 501-billion-parameter model is now free to download.
2026-10-16