Evan Otero on X: "We are aware of the OpenCode security incident involving Gemini API ...

X • October 17, 2026

Evan Otero @EvanOtero We are aware of the OpenCode security incident involving Gemini API keys stored in OpenCode. We've blocked exposed API keys are working with impacted customers and OpenCode. If you used an API key with OpenCode: create a new key in AI Studio, delete the old one, and review your usage. If you see charges you didn't make, Google Cloud Billing support from your account. OpenCode @opencode 9h We had a security breach last night related to a large scale distillation attack that impacted 1.4% of OpenCode Console users We have notified them all this morning via email. If you did not get an email you were not impacted, it was a subset of users who had external providers 10:53 PM · Oct 17, 2026 · 19.3K Views 10

JP @zenoware 3h you guys also just downright limited accounts altogether despite api key deletion. im locked out for a month.

shaped @shaped 3h how fast did you guys spot it?

Spxctre @onlyspxctre 1h I have removed the API key, is there anything else I need to do to get the project unsuspended on Google Cloud Console?

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

OpenCode Security Breach Exposes User API Keys OpenCode reported a security breach on October 17, 2026, affecting 1.4% of its Console users. The breach was linked to a large-scale distillation attack, which compromised third-party API keys stored in user workspaces. Users have reported unauthorized charges on their accounts, with one user noting $400 in charges linked to Anthropic. OpenCode has notified all affected users via email and is working with Anthropic, OpenAI, and Google to address the incident. Users are advised to revoke and replace their API keys and review their account activity for any unauthorized usage. Access issues have also been reported by some users trying to log in. The situation remains ongoing as OpenCode investigates the breach further. 3 sources 56

Extracted Entities

Evan Otero on X: "We are aware of the OpenCode security incident involving Gemini API ...

The full story

Extracted Entities

Attack Types (1)

CWE Weaknesses (1)

Tools (3)