OpenCode Confirms Breach That May Have Exposed Users’ OpenAI, Anthropic and Google API Keys
The open-source AI coding agent says a breach tied to what it calls a “large scale distillation attack” hit 1.4% of its Console users who had outside AI providers linked, and affected users are being told to revoke their keys.
By 1EyeAI Desk ·
OpenCode, the open-source AI coding agent that lets developers plug in their own model keys, says it suffered a security breach overnight. In a post on X on Saturday afternoon, the company said the breach was “related to a large scale distillation attack” and affected 1.4% of OpenCode Console users, specifically a subset who had external AI providers linked. It said everyone affected was notified by email that morning, that users who got no email were not affected, and that the incident is still ongoing while it works with Anthropic, OpenAI and Google to fix it. These are the company’s statements; it has not yet published a full incident report.
According to Notebookcheck, which reviewed OpenCode’s email to users as shared on Reddit, someone gained unauthorized access to a legacy system the company was in the process of shutting down, and API keys stored in users’ workspaces, including OpenAI and Anthropic keys, may have been exposed. OpenCode is asking affected users to revoke and replace those keys, update any apps that use them, and review recent usage. A “distillation attack” means harvesting a model’s answers in bulk to train another model, which suggests the stolen keys may have been used to pull large volumes of output; that is OpenCode’s framing, and it has not shared further details.
Some users say the damage has already landed. In posts cited by Notebookcheck, one user reported about $400 in unauthorized Anthropic charges and another said Google usage reached around €200 before their project was suspended for abuse. Those are individual user reports, not confirmed figures. Other users reported expired OpenCode keys and trouble signing in. OfficeChai and Crypto Briefing have also covered the disclosure.
What this means for you: If you use OpenCode with your own keys and got the email, rotate those keys now and check your provider bills. More broadly, any AI tool that stores your API keys is a target, so use separate keys per tool, keep spending caps on, and rotate keys you no longer need.
1EyeAI is an independent publication and is not affiliated with, endorsed by, or sponsored by X, SpaceX, SpaceX Super Intelligence, xAI, Tesla or Cursor.