opencode told affected users by email that someone broke into a legacy system it was shutting down, according to a copy posted on hacker news. from there, provider api keys saved in opencode console workspaces may have been exposed. the company disclosed the breach publicly on oct 17, calling it “a large scale distillation attack” in its post. it hit 1.4% of console users, all of them with external providers linked. affected users got an email the same morning. those who got no email were not affected, opencode says.
what users report
the stolen keys were used before the notice arrived. developer chris sinco wrote on X that spend alerts from openai, anthropic and google fired overnight. only google suspended his project for suspicious activity.
users on r/opencode report $400 in charges on an anthropic account, notebookcheck reports. another saw ~€200 in google usage and a suspended project. others say openai and anthropic alerted them before opencode's email did.
opencode co-founder dax raad says his own accounts are under attack too.
opencode has not tied the breach to the open-source cli. keys kept in local environment variables never reached its servers.
why "distillation"
distillation means training one model on another model's answers. stolen keys give an attacker volume access to frontier models on someone else's bill. opencode says it is working with anthropic, openai and google on remediation. it has not said who ran the attack.
what is still missing
opencode has not said how the attacker got into the legacy system or when access started. it has not said how many keys were used or whether it will cover the charges. the company asks affected users to revoke and replace their provider keys. it also asks them to review recent usage with each provider.
