Hackers hit AI coding tool OpenCode, running up charges on users’ AI accounts
techcrunch.com Oct 19, 2026

Hackers hit AI coding tool OpenCode, running up charges on users’ AI accounts

AI-summarised brief · reviewed before publication

OpenCode, an open‑source AI coding agent, disclosed a security breach that overnight compromised an older system, affecting 1.4% of users on its OpenCode Console platform where API keys are stored. The attack, described as a large‑scale distillation attempt, led to unauthorized charges on users’ AI accounts, with some exceeding $1,000. OpenCode notified impacted users, blocked exposed keys, and is processing refunds. The incident highlighted challenges for companies lacking vetted, low‑restriction AI models to defend against AI‑driven cyberattacks.

💡 Why It Matters

  • · The breach exposes a growing vulnerability in AI‑centric development tools, forcing developers to confront the limits of current safety guardrails and the need for more robust, vetted AI models to secure sensitive credentials.