OpenCode Hacked, Affecting 1.4% of Users and Leading to Financial Losses

OpenCode, an open-source AI programming tool developed by the Anomaly team, has confirmed a security breach that has impacted approximately 1.4% of its Console users. The incident involved a large-scale distillation attack, which has potentially exposed API keys for models stored on the platform. Users have reported unusual charges on their accounts linked to services from OpenAI, Anthropic, and others, with some individuals claiming losses of hundreds of dollars, and one user reporting a loss of around $1,700.

The breach was traced back to unauthorized access to a set of decommissioned systems within the OpenCode Console, which centralizes API keys from various providers. Affected users have been advised to revoke and replace their API keys and to review their recent call records. Developers Colin Parsons and Preston Zeller reported unusual charges of $281 and $1,700, respectively, on their accounts, while others noted charges of about $400 on Anthropic services.

In response to the breach, OpenCode is collaborating with OpenAI, Anthropic, and Google to mitigate the impact. Lydia Hallie from Anthropic confirmed that the company has revoked the affected Claude API keys, while Tibo from OpenAI stated that efforts are underway to assist users in restoring access and obtaining refunds for the unauthorized charges. Dax Raad, one of the main creators of OpenCode, emphasized that the breach pertains specifically to the Console service and not to the locally running version of OpenCode, which does not transmit keys to OpenCode servers. The team is currently enhancing security measures following the attack.

© 2026 KLEA News. All Rights Reserved. This article is provided for informational purposes only. It is not offered or intended to be used as legal, tax, investment, financial, or other advice.

Source: KLEA News