OpenCode Console breach exposes API keys, triggers unauthorized AI charges

Hackers accessed OpenCode Console, stealing API keys from 1.4% of users and generating significant unauthorized charges on linked AI service accounts.

Threat Times Intrusion DeskOctober 19, 20262 min read

Share LinkedIn Reddit

Illustration: A sleek computer terminal sits on a dark desk, its screen displaying tangled, abstract geometric shapes in sharp red and blue hues. — AI-generated illustration: Threat Times

Key points

Attackers breached OpenCode Console, exposing API keys for 1.4% of users.
Unauthorized charges on OpenAI, Anthropic, and Google AI accounts reached hundreds or thousands of dollars.
The open-source desktop application and command-line tool were not affected by the intrusion.

OpenCode, an open-source AI coding agent, confirmed on Saturday that attackers compromised its online platform, OpenCode Console. The breach resulted in the theft of API keys belonging to 1.4% of users who store these digital credentials within the service. According to TechCrunch, the incident occurred overnight and has led to unauthorized spending on linked AI services.

The company stated on X that the incident involved a large-scale distillation attack. Users who did not receive a notification email were not impacted. OpenCode co-founder Dax Raad clarified that the breach was confined to the Console web interface. The standalone open-source application and command-line tool were not affected, as those keys never reach the company’s servers.

Context and Background

Developers reported seeing spending alerts from OpenAI, Anthropic, and Google AI fire off simultaneously. Some users described unauthorized charges in the hundreds of dollars, with a few reporting totals exceeding $1,000. The exposure of API keys allows attackers to generate high volumes of AI outputs. OpenCode suggested this volume is necessary for distillation attacks, though some skeptics argued the framing was unproven.

Anthropic and Google blocked the API keys they identified as exposed. OpenAI worked with OpenCode to restore access and refund customers for credits used during the attack. OpenCode said it is currently processing refunds for unauthorized charges. These actions by major AI providers were reported by TechCrunch.

Who Is Affected

The breach specifically impacted users of the OpenCode Console platform. This online service allows developers to store API keys in their workspaces. The attack impacted 1.4% of OpenCode Console users. Users of the local, open-source version of the tool were not at risk. The company notified all affected users via email early on Saturday morning.

According to Raad, attackers had been attempting to break into systems nonstop for 48 hours. This persistent pressure required the OpenCode team to run AI defensive agents around the clock. The incident highlights challenges for companies without vetted access to AI models with fewer safety restrictions in defending against such large-scale, AI-driven cyberattacks.

What should you do?

Users of cloud-based developer tools should review their account security settings immediately. Check for any unusual activity or unauthorized access logs in your AI service provider dashboards. Rotate any API keys that were stored in third-party web consoles. Monitor your credit card statements and AI service billing for unexpected charges.

What to do and how to stay safe: OpenCode

Rotate all API keys stored in third-party web consoles or cloud workspaces immediately.
Review billing history on OpenAI, Anthropic, and Google AI accounts for unauthorized charges.
Enable spending limits or alerts on AI service accounts to detect unusual usage patterns.
Monitor email for notifications from service providers regarding compromised credentials.

Step-by-step guide: Social Engineering Warning Signs and How to Respond

General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.