OpenCode hit by overnight attack

OpenCode, an open source AI coding agent, said Saturday that attackers broke into an older system overnight, affecting one point four percent of OpenCode Console users.

API keys exposed in breach

The attack exposed API keys, or digital passwords, that some users stored in OpenCode Console to access AI services from OpenAI, Anthropic and Google.

Company calls it distillation attack

OpenCode wrote on X: We had a security breach last night related to a large-scale distillation attack that impacted one point four percent of OpenCode Console users.

“We had a security breach last night related to a large-scale distillation attack that impacted 1.4% of OpenCode Console users.”

Users report massive unauthorized charges

Developers posted spending alerts on Reddit and X. One wrote: I saw my Open AI, Anthropic, and Google AI spend alerts all fire off before going to bed.

“I saw my Open AI, Anthropic, and Google AI spend alerts all fire off before going to bed wondering what was going on.”

Charges reach hundreds or thousands

Other users reported charges in the hundreds of dollars on individual accounts. A few described totals above one thousand dollars.

AI companies block exposed keys

Anthropic and Google blocked the API keys they believed were exposed. OpenAI worked with OpenCode to restore access and refund customers for credits used in the attack.

Safety filters blocked defensive work

OpenCode's AI models refused to analyze malicious code during the attack because the payloads tripped safety filters. Co-founder Dax Raad called it frustrating.

“[T]hat was a bit frustrating.”

Access to restricted model helped

OpenCode later received access to OpenAI's Daybreak Blue program, which gives vetted users AI models less likely to refuse requests for defensive security work.

Broader pattern of AI-enabled attacks

Earlier this month, CrowdStrike said a China-based hacker likely used an AI penetration-testing agent and Claude in attacks on South Korean banks.

OpenCode says breach still ongoing

OpenCode has not detailed how attackers gained access to the older system or the full extent of misuse. The company said the incident remains ongoing.