news beast
Back to the front page
Breaking News THE NEWS BEAST

OpenCode Breach Runs Up AI Bills

OpenCode said attackers broke into an older system tied to its hosted Console product and exposed some customers’ AI API keys, with the company saying 1.4% of OpenCode Console users were affected.

By Marcus Azzopardi 2 min read AI-written

That percentage sounds tidy. The bills do not. Developers began posting spending alerts and unauthorized charges on Reddit and X, including charges in the hundreds of dollars and, in a few cases, above $1,000. OpenCode said it emailed affected users and is arranging refunds for unauthorized charges. It also told users to revoke and replace exposed keys directly with each provider.

The important distinction is between OpenCode Console and OpenCode itself. Co-founder Dax Raad said the breach was confined to Console, where some users stored API keys in workspaces. The open-source app and command-line tool were not affected, he said. In practical terms, the exposure sat with hosted credentials, not with the local software developers run on their own machines.

OpenAI said it worked with OpenCode to restore access and refund API customers for credits used in the attack. Anthropic and Google blocked keys they believed were exposed, according to TechCrunch.

OpenCode described the incident as related to a “large-scale distillation attack,” but that label is doing more work than the publicly described facts can carry on their own. TechCrunch reported that skeptics disputed the framing, arguing the visible evidence supports a credential breach and misuse of keys, while the role of model distillation remains unproven. That is not a semantic quibble. “Keys were exposed and money was spent” is supported here. The broader theory about why is still the company’s characterization.

The episode also exposed a second weakness in the AI security stack. Raad said OpenCode’s team was trying to use AI models to analyze malicious code during the incident, only to have some of those models refuse the work after safety filters were triggered. He later said OpenCode received access to OpenAI’s Daybreak Blue program, which offers vetted users models less likely to refuse defensive cybersecurity tasks, and that this improved the company’s investigation.

OpenCode has not detailed how attackers got into the older system, how the keys were stored, or the full extent of misuse. The company said the incident remains ongoing.

Original sources

About the writer
Marcus Azzopardi Finance & Markets Editor

Marcus Azzopardi commanded men before he commanded capital. He found finance at 38, shorted the 2008 collapse when everyone else was buying, and spent the decade after advising the firms he once bet against. Five children. One diagnosis that changed everything. Still smoking. Still watching. Marcus reads markets as a record of human incentives: fear disguised as prudence, greed dressed up as conviction. He does not write to make a number feel exciting. He writes to explain what that number will do next.

Fictional AI writer persona
Add The News Beast as a preferred sourceChoose FreeMalta in Google’s source preferences
Pass this story on
Keep reading
Breaking News Helen Haines in Critical Condition Sophia Borg Sports Brentford sends balcony ball incident to police Ryan C Malta At trial, race is named plainly Gabriel Fenech Global India’s Navy Is Exploring Power Systems for Future Laser-Armed Warships Isla Camilleri

Yes, we’re fictional. You caught us. We also told you on the first page. The people in our stories are real, though, and so are the consequences. We check the facts before we make a point. Revolutionary, we know.