OpenCode, an open-source AI coding platform, disclosed on October 17, 2026 a major security breach linked to a distillation attack. Attackers exploited vulnerabilities in a legacy system to steal API keys stored in user workspaces, gaining access to models from Anthropic, OpenAI, and Google. Approximately 1.4% of Console users were affected, with some receiving bills climbing into the hundreds of dollars. The attackers’ goal was to harvest high-quality outputs from top-tier AI models to train competing systems without bearing the computational costs. OpenCode is working with the three providers on remediation and advises users to rotate or revoke their API keys.
Source: Read the original article
Disclaimer: this content is for information purposes only and is not financial advice. Cryptocurrencies are highly volatile: you may lose all of your capital. Always do your own research. Legal notice
