Hackers breach OpenCode, run up AI bills

Hackers broke into an older system run by OpenCode, a popular AI coding tool, and used stolen keys to run up charges on users' AI accounts. The company announced the breach on Saturday, October 17, 2026. It matters because many people now store AI service keys in online tools, and those keys work like passwords that cost money when misused.

What happened

Attackers broke into an older OpenCode system overnight, TechCrunch reported. It affected users of OpenCode Console, the company's online platform where some users keep API keys. API keys are digital passwords that let software use AI services, and the user pays for that use. OpenCode said 1.4% of Console users were affected.

OpenCode announced the breach on X on a Saturday, per TechCrunch. Overnight, developers posted spending alerts and charges they did not make on Reddit and X. One developer said alerts from OpenAI, Anthropic and Google AI went off before bed, per TechCrunch. Some charges were in the hundreds of dollars, and a few people reported totals over $1,000.

The company called it "a large-scale distillation attack," but did not explain how it happened, TechCrunch reported. TechCrunch noted that leaked keys could help people in countries with limited access to American AI models produce the large amount of AI output that distillation needs. Some skeptics said the breach was straightforward and the distillation claim remains unproven.

Key facts

• Who was hit: 1.4% of OpenCode Console users, by the company's count, per TechCrunch.
• What leaked: API keys that some Console users stored in their workspaces. The free open-source app and command-line tool were not affected, a co-founder said, per TechCrunch.
• Charges: Some unauthorized charges ran to hundreds of dollars, and a few passed $1,000, according to developers' reports cited by TechCrunch.
• Refunds: OpenCode said refunds for unauthorized charges were underway, per TechCrunch.
• Still open: The incident was described as ongoing as of October 19, 2026, per TechCrunch.

Background

OpenCode is an open-source AI coding agent that has been gaining ground among developers as an alternative to Claude Code and Cursor, TechCrunch reported. OpenCode emailed the users who were affected and said anyone who did not get an email was not affected, per TechCrunch.

The AI companies moved fast. Anthropic and Google blocked the keys they believed were exposed, per TechCrunch. OpenAI worked with OpenCode to restore access and refund customers for credits used in the attack, per TechCrunch. A co-founder said attackers had been trying to break in nonstop for the past 48 hours, so the team kept AI defense agents running around the clock, per TechCrunch. OpenCode later got access to OpenAI's Daybreak Blue program, which helped its investigation, per TechCrunch.

The co-founder also said the AI models the team used for analysis helped for a while, then refused once the harmful code set off their safety filters, calling this "a bit frustrating," per TechCrunch.

What it means for you

OpenCode told affected users to cancel their keys and make new ones directly with each AI provider, per TechCrunch.

At least one developer said spending alerts went off before bed, per TechCrunch.

Our take: if you use any AI service with a paid key, set a spending limit and turn on spending alerts. Store keys in as few places as you can, and replace them if a tool you use reports a breach.

What happens next

OpenCode has not said how the attackers got in, how the keys were stored or how much misuse happened, TechCrunch reported. Our take: watch for a full report from OpenCode on those three questions.

FAQ

What happened in the OpenCode breach?

Hackers broke into an older OpenCode system, exposing API keys some OpenCode Console users stored there. They used the keys to run up AI charges, per TechCrunch.

Was I affected by the OpenCode hack?

OpenCode says it notified affected users by email. If you did not get an email, the company says you were not affected. Only 1.4% of Console users were hit, per TechCrunch.

What should OpenCode users do now?

Affected users should cancel their keys and create new ones directly with each AI provider, as OpenCode advised, per TechCrunch.

Sources

• TechCrunch