OpenCode says a breach of its Console may have exposed AI provider API keys for 1.4% of Console users

TLDR

• Attackers reached an older OpenCode system; API keys saved in Console for 1.4% of users may be exposed.²³
• Users report unauthorised charges of up to $1,700; OpenCode says refunds are under way.¹²
• OpenCode's open-source app and CLI are not affected; affected users are told to revoke and replace keys with each provider.²³

OpenCode, an open-source AI coding agent, said attackers broke into an older system overnight and that the breach affected 1.4% of users of OpenCode Console, its hosted service where some users store OpenAI, Anthropic or Google API keys.¹² The Hacker News dates the intrusion to the night of 16 October, and BleepingComputer cites OpenCode's email as giving 17 October, 00:30 UTC as the earliest possible exposure.¹³ OpenCode emailed affected users and said anyone who did not receive a message was not affected.¹³

Users reported charges from several hundred dollars to as much as $1,700, and some said Google suspended projects over "abusive activity consistent with hijacked resources", according to BleepingComputer.¹ TechCrunch reports that Anthropic and Google blocked the keys they believed were exposed, OpenAI said it worked with OpenCode to restore access and refund its API customers, and OpenCode said refunds were under way.² The Hacker News stresses that OpenCode's wording is that keys "may have been exposed" and that the charges are users' own reports.³

OpenCode described the breach as related to a large-scale distillation attack, but TechCrunch notes some skeptics called that framing an overstretch and the link to distillation is unproven.² OpenCode has not said how the older system was reached, how keys were stored or how many users 1.4% represents, per TechCrunch and The Hacker News.²³ TechCrunch reports co-founder Dax Raad saying the open-source app and command-line tool were not affected, and that OpenCode told affected users to revoke and replace their keys directly with each provider.² Deleting a key from Console does not revoke it, so users must revoke it at the provider and review usage back to at least 16 October, according to The Hacker News.³

Why it matters: Provider API keys are bearer credentials, so a single hosted key store can turn into direct billing abuse across several AI providers at once, as the user-reported charges show.¹³