Hackers hit AI coding tool OpenCode, running up charges on users’ AI accounts
AI-summarised brief · reviewed before publication
OpenCode, an open‑source AI coding agent, disclosed a security breach that overnight compromised an older system, affecting 1.4% of users on its OpenCode Console platform where API keys are stored. The attack, described as a large‑scale distillation attempt, led to unauthorized charges on users’ AI accounts, with some exceeding $1,000. OpenCode notified impacted users, blocked exposed keys, and is processing refunds. The incident highlighted challenges for companies lacking vetted, low‑restriction AI models to defend against AI‑driven cyberattacks.
💡 Why It Matters
- · The breach exposes a growing vulnerability in AI‑centric development tools, forcing developers to confront the limits of current safety guardrails and the need for more robust, vetted AI models to secure sensitive credentials.