⚡OpenCode user credentials were leaked in a security breach.

What it means

OpenCode, an AI coding tool, suffered a security breach where an attacker accessed a legacy system, potentially exposing API keys that users had saved in the OpenCode Console for third-party AI providers like OpenAI and Anthropic. The company confirmed approximately 1.4% of Console users were affected, and many users reported unauthorized usage of their AI credits. This is not a typical credential leak; rather, it's a leak of API keys that allow access to paid AI services.

Accuracy & sourcesGrounded

The claim is directly confirmed by OpenCode's official Twitter account, a primary source. Additional reporting from Hacker News and other outlets corroborates the breach's specific details: a legacy system was compromised, and third-party AI provider keys were exposed. The reporting is consistent and close to the primary source.

How new