OpenCode discloses distillation attack that hit 1.4% of Console users
Photo: Crypto Briefing
Attackers exploited a legacy system to hijack stored API keys for Anthropic, OpenAI, and Google models, leaving some users with bills in the hundreds of dollars OpenCode, the open-source AI coding platform, has disclosed a large-scale security breach tied to what it calls a distillation attack. The incident affected about 1.4% of its Console users who had linked external AI provider accounts. The attackers were not after passwords or credit card numbers. They wanted access to some of the most expensive AI models on the market, and they found a way to make OpenCode users pay for it.
Source: Crypto Briefing
