CatalystTech/AI
HACKERS HIT AI CODING TOOL OPENCODE , RUNNING UP CHARGES ON USER AI ACCOUNTS
Hackers exploited OpenCode to run up charges on user AI accounts.
Context
What happened: OpenCode said attackers broke into an older system overnight, affecting 1.4% of users of OpenCode Console, where some users store API keys for AI services. The company said the incident is ongoing.
Key numbers: 1.4% of OpenCode Console users affected; some users reported charges in the hundreds of dollars, a few above $1,000; attackers tried to break in for
Why it matters: Anthropic and Google blocked exposed keys, and OpenAI refunded API customers. The episode highlighted complaints that safety guardrails on commercial AI models blocked defensive analysis during the attack.
What changed
OpenCode said attackers broke into an older system overnight, affecting 1.4% of users of OpenCode Console, where some users store API keys for AI services. The company said the incident is ongoing.
Why it matters
Anthropic and Google blocked exposed keys, and OpenAI refunded API customers. The episode highlighted complaints that safety guardrails on commercial AI models blocked defensive analysis during the attack.