OpenCode Console

OpenCode Console, part of the OpenCode platform where users store API keys, suffered a security breach last night that impacted 1.4% of its users. Attackers accessed an older system, enabling a distillation attack and stealing API keys used to call AI services. The attack triggered unauthorized charges ranging from a few hundred dollars to over $1,000 on users’ OpenAI, Anthropic, and Google AI accounts. Anthropic and Google immediately blocked the exposed keys; OpenAI worked with OpenCode to restore key access and refund affected customers. OpenCode is processing refunds. The breach did not affect the open‑source app or command‑line tool, and API keys never reach the OpenCode core team. The company ran AI defensive agents 24/7 during the attack; initial AI analysis was hindered by safety filters until OpenCode gained access to OpenAI’s Daybreak Blue program, which improved investigative capabilities. The incident remains ongoing. OpenCode CONTAINS OpenCode Console Anthropic BLOCKED OpenCode Console Google AI BLOCKED OpenCode Console MistEye conducted a global scan of PHP-related assets across the crypto industry· Entity summary generated by Graphiti