OpenCode, an open-source AI coding agent, said Saturday that attackers breached an older system, affecting 1.4% of users on its OpenCode Console platform, where some stored API keys. The breach led to unauthorized charges on several accounts, with some users reporting totals exceeding $1,000.
"We had a security breach last night related to a large-scale distillation attack that impacted 1.4% of OpenCode Console users," the company wrote on X. "We have notified them all this morning via email."
Users who did not receive an email were not impacted, the company said. While the company did not specify how the distillation attack occurred, leaked API keys can help users in countries with restricted access to American models generate the high volume of outputs needed for that process.
Some skeptics called the framing an overstretch, arguing that the incident was a straightforward breach whose use for distillation remains unproven. Overnight, developers began posting spending alerts and unauthorized charges on Reddit and X. "I saw my Open AI, Anthropic, and Google AI spend alerts all fire off before going to bed wondering what was going on," a developer wrote.
Anthropic and Google both blocked the API keys they believed were exposed, while OpenAI said it worked with OpenCode to restore access and refund its API customers for credits used in the attack. OpenCode said refunds for unauthorized charges are underway.
The exposed keys were confined to Console, where some users had them in workspaces. The open-source app and command-line tool were not affected, according to co-founder Dax Raad.
"Note this is the OpenCode Console, not OpenCode itself, those keys never come to us," he wrote on X. Even as users and AI companies moved to disable the exposed keys, the OpenCode team was still under pressure.
Raad said attackers had been trying to break into its systems nonstop for 48 hours, requiring the team to keep AI defensive agents running around the clock.
Source: techcrunch
