OpenCode says distillation attack hit 1.4% of Console users via stolen API keys
In brief
- OpenCode disclosed the breach on October 17, 2026, according to Crypto Briefing.
- About 1.4% of Console users with linked AI provider accounts were affected.
- A legacy system flaw let attackers reach API keys stored in user workspaces.
- Affected users reported drained balances, with some bills reaching hundreds of dollars.
- OpenCode advised users to rotate or revoke their API keys.
What OpenCode says happened
According to OpenCode's disclosure as reported by Crypto Briefing, the attackers got in through a legacy system and reached API keys sitting in user workspaces. Those keys were connected to models from Anthropic, OpenAI and Google.
Then the queries started.
With the stolen keys, the attackers ran repeated queries against high-end AI models. Affected users reported that their account balances drained quickly (some bills reached the hundreds of dollars, per those users' accounts as relayed by Crypto Briefing). That's not a confirmed loss figure, but it's the cost that landed on the people whose keys were taken.
The attackers weren't after passwords or credit card numbers, Crypto Briefing reported.
Why OpenCode calls it distillation
Distillation is a technique in which one AI model learns by studying the answers of another. "Distillation attack" is OpenCode's own label for the incident, and Crypto Briefing reported that the attack appeared designed to harvest high-quality responses from top-tier models.
It isn't a new idea. Anthropic detailed similar distillation methods used by others in February 2026, and major AI labs had been tightening direct access to their most capable models, according to the same report.
What users are being told to do
OpenCode said it's working with Anthropic, OpenAI and Google on remediation. The company advised users to secure their credentials by rotating or revoking their API keys, which is the step it's pointing every affected Console account toward.
The money question is still open. The report didn't specify how charges from unauthorized queries would be handled, so users who saw those balances drain don't yet have an answer on whether the bills stand.
Frequently asked questions
What is a distillation attack in the OpenCode breach?
Distillation is a technique in which one AI model learns by studying the answers of another. OpenCode used the label for this incident, and Crypto Briefing reported the attack appeared designed to harvest high-quality responses from top-tier models.
How many OpenCode users were affected by the breach?
OpenCode said the incident affected about 1.4% of its Console users who had linked external AI provider accounts. The compromised keys were connected to models from Anthropic, OpenAI and Google, according to Crypto Briefing.
What should OpenCode users do after the breach?
OpenCode advised users to secure their credentials by rotating or revoking their API keys. The company said it's working with Anthropic, OpenAI and Google on remediation. The report didn't specify how charges from unauthorized queries would be handled.
