ConcludedRan 1 dayin the edition since 24 Oct 20266 sourcesupdated 24 Oct 2026

OpenCode's API key distillation breach

The gist

Latest: OpenCode Breach Exposed AI API Keys in Distillation Attack

Stolen API keys let attackers run model distillation traffic billed to victims while the traffic blends in as ordinary usage, making detection difficult. The incident also revealed that frontier AI safety guardrails can block defenders during active incidents, a problem previously encountered by Hugging Face.

When stories like this move, I write about them in an email each morning.

One free email each morning, around 8 AM US Eastern.

The full picture

OpenCode disclosed a security breach affecting 1.4% of its Console users who had external AI providers configured, with API keys for OpenAI, Anthropic, and Google potentially exposed. Some affected users reported unauthorized charges exceeding $1,000. OpenCode attributed the breach to a large-scale distillation attack. Attackers continued sustained attempts for at least 48 hours after the initial breach, forcing defenders to maintain continuous agent coverage in response. Affected users were notified by email.

How it developed

First in the edition · 24 October 2026

23 October 2026in the 24 Oct edition

OpenCode disclosed a breach affecting 1.4% of Console users with external AI providers configured, exposing API keys for OpenAI, Anthropic, and Google in what it called a distillation attack.

Some users reported unauthorized charges exceeding $1,000. CellCog analyzed why real keys are targeted: they are verified, have payment history, and let fraudulent traffic blend as ordinary use, billed to the victim. Attackers continued attempts for at least 48 hours; frontier AI models refused to help analyze them when safety guardrails activated.

First citedThe Neuron Rohan Paul on X Zvi's AI Roundups cellcog.ai+2 more

17 October 2026

OpenCode disclosed the breach, notifying 1.4% of affected Console users by email; CellCog published analysis of the distillation attack vector

Sources

Rohan Paul on X