OpenCode says an intruder reached a legacy system on the night of 16 October and may have exposed the third-party AI provider keys users had stored in OpenCode Console, its optional hosted workspace. Console holds a customer's OpenAI, Anthropic or Google key and uses it to call the provider so team members never see it; the affected group is 1.4% of Console users, all of whom were emailed on 17 October and told to revoke and replace their keys. A provider key is a bearer credential, so deleting it from Console does not revoke it and a Console budget cannot cap its use, because Console only sees requests through its own gateway. Some users report billing they did not run — one posted USD 281 on an OpenAI key and USD 168 on an Anthropic key, another put losses at USD 1,700. OpenCode described the incident as ongoing and "related to a large-scale distillation attack", and separately published distillation-defence guidance; it has not said that any key was copied or used, who was behind it, or how the legacy system was reached. Keys stored locally by the CLI and desktop apps were not involved.

• Source article