OpenCode breach exposes a bigger problem with AI infrastructure: API keys are essentially money with an HTTP header.
Here's what happened:
> Attackers accessed a legacy system being decommissioned. Third-party API keys stored in OpenCode Console workspaces may have been exposed.
> The weak point: Legacy infrastructure with potential access to live API credentials.
> Once stolen, a bearer key can authorize requests to OpenAI, Anthropic, or Google, with the costs charged to its owner.
> OpenCode links the breach to a large-scale distillation attack affecting 1.4% of Console users.
- But there's an important distinction:
Distillation may explain what the attackers wanted. It doesn't explain how they got in.
The initial attack vector remains undisclosed.
We had a security breach last night related to a large scale distillation attack that impacted 1.4% of OpenCode Console users
We have notified them all this morning via email. If you did not get an email you were not impacted, it was a subset of users who had external providers linked
The incident is ongoing so we cannot share more details at this point but we are working with Anthropic, OpenAI, and Google to remediate