OpenCode Console Breach Exposes Users' Stored OpenAI, Anthropic, and Google API Keys

OpenCode Console, the hosted gateway for the open-source OpenCode coding agent

An intruder reached an older OpenCode system on the night of October 16, 2026, and 1.4% of Console users, all with an outside provider key linked, were notified on October 17. Users reported unauthorized charges from hundreds of dollars to more than $1,700 across OpenAI, Anthropic, and Google. Anthropic and Google blocked the exposed keys and OpenAI refunded credits. The CLI and desktop apps, which store keys locally, were not affected. OpenCode called it part of a "large-scale distillation attack," a framing outlets called unproven, and said models it used for analysis refused once the attack code tripped safety filters. Root cause not disclosed; the incident was described as ongoing

Long-lived third-party AI provider keys held centrally in a legacy hosted system, where one intrusion exposed them for resale or misuse