OpenCode Under Attack: API Keys from OpenAI, Anthropic Exposed
OpenCode has confirmed that a large-scale distillation attack exposed API keys for OpenAI, Anthropic, and Google stored by approximately 1.4% of its Console users. Affected accounts have been notified via email. The company is working with the three providers to address the issue but cannot yet confirm whether the keys have been misused. It recommends revoking and regenerating keys on the respective platforms, reviewing usage since October 17, and setting spending limits.
OpenCode has confirmed that a large-scale distillation attack led to the exposure of OpenAI, Anthropic, and Google API keys stored by approximately 1.4% of its Console users. Affected accounts have been notified via email.
The company is working with the three providers to address the issue and has not yet been able to confirm whether the keys have been misused. The official recommendation is to revoke and regenerate the keys in the respective platform dashboards, review usage since October 17, and set spending limits.
Source: Startup Fortune
