New to this? Read it in simple words
- OpenCode is a free AI tool that helps people write code.
- Attackers broke into its paid web service and may have taken saved keys for AI accounts.
- OpenCode says 1.4% of the service’s users were hit. Some found bills of more than $1,000.
- Users should cancel their old keys and check their AI bills.
- API key
- A secret code that lets a program use an AI service and charge it to your account.
- Coding agent
- An AI tool that writes and changes code for a developer, step by step.
- Distillation
- Training a new AI model on the answers of another model.
OpenCode is a free, open-source AI coding agent, used by many developers as an alternative to Claude Code and Cursor. Beside the free app, it runs the Console, a paid web service where users can save keys for AI providers. On Saturday, October 17, OpenCode said it had been breached.
What happened
OpenCode wrote on X that it had a security breach linked to “a large-scale distillation attack” that hit 1.4% of its Console users. In distillation, someone uses a model’s answers to train another model.
In an email to the users affected, OpenCode said attackers got into “a legacy system that we were in the process of decommissioning”. Saved keys for OpenAI, Anthropic and Google “may have been exposed”, the email says.
Only Console users who had linked outside AI providers were affected, the company says. OpenCode’s free app and command-line tool were not part of the breach.
From OpenCode’s posts and email, TechCrunch and BleepingComputer.
The bills
Developers reported charges of hundreds of dollars on their AI accounts, some of more than $1,000, TechCrunch reports. BleepingComputer found one report of up to $1,700. Some users said Google suspended their cloud projects for “hijacked resources”.
Anthropic and Google blocked the exposed keys, and OpenAI is refunding credits, TechCrunch reports.
Dax Raad, a co-founder of OpenCode, said attackers kept trying for 48 hours. TechCrunch quotes skeptics who see a plain breach, not a distillation attack. OpenCode has not named anyone or shown evidence for its explanation.
What users can do
Users who saved provider keys in the Console should cancel them with each provider and make new ones, TechCrunch advises.
It is also worth checking the bills of every linked AI account for charges since October 16.
Sources
Every fact in this story comes from the sources below. Open them to check our work.
- 1
- 2Research · October 19, 2026Hackers hit AI coding tool OpenCode, running up charges on users’ AI accounts TechCrunch
- 3Research · October 19, 2026OpenCode hack exposes API keys amid AI distillation attacks BleepingComputer
- 4Research · October 19, 2026OpenCode Breach Could Affect OpenAI, Anthropic and Google Infosecurity Magazine
The 1.4% share and the “distillation attack” are OpenCode’s own account. The charges come from users’ reports, and outlets disagree on what refunds OpenCode has promised, so we leave that out.
Attackers broke into OpenCode’s Console and exposed saved AI keys, leaving some developers with charges of more than $1,000. How we rate the mood