Anthropic · OpenAI · Google · Axios · Crypto Briefing
OpenCode breach exposes API keys as AI guardrails stall the defenders
Compiled by KHAO Editorial — aggregated from 1 source. See llms.txt for citation guidance.
◌ Single Source
Attackers abused leaked OpenAI, Anthropic and Google keys while frontier models declined to help analyze the attack code.
Key facts
- Anomaly Innovations, the company behind the open-source AI coding agent OpenCode, disclosed a security breach on October 17, 2026
- Reported unauthorized charges ranged from hundreds of dollars to more than $1,000 for some users
- According to the research findings, roughly 1.4% of OpenCode Console users had their API keys exposed
- Join 34,000+ readers across crypto, finance, and policy
Summary
Anomaly Innovations, the company behind the open-source AI coding agent OpenCode, disclosed a security breach on October 17, 2026. According to the research findings, roughly 1.4% of OpenCode Console users had their API keys exposed. Model distillation is the practice of feeding a powerful model huge volumes of prompts and using its answers to train a cheaper copycat. Reported unauthorized charges ranged from hundreds of dollars to more than $1,000 for some users.