Back News.Ycombinator

OpenCode Hacked: User credentials leaked

News.Ycombinator • October 17, 2026

OpenCode @opencode We had a security breach last night related to a large scale distillation attack that impacted 1.4% of OpenCode Console users We have notified them all this morning via email The incident is ongoing so we cannot more details at this point but we are working with Anthropic, OpenAI, and Google to remediate 5:56 PM · Oct 17, 2026 · 16.8K Views There’s a new version of this post. See the latest post Opens the new version of this post

Stoven @lol_gogy94668 1h 138$ gone. Will we be compensated? 1

Vineeth @vineeth_agi 1h wtf 😭 🙏🙏 2

Tom Zarebczan 🛡 @TomZarebczan 59m A distillation attack that leaked keys? hmm 1

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

OpenCode Security Breach Exposes User API Keys OpenCode reported a security breach on October 17, 2026, affecting 1.4% of its Console users. The breach was linked to a large-scale distillation attack, which compromised third-party API keys stored in user workspaces. Users have reported unauthorized charges on their accounts, with one user noting $400 in charges linked to Anthropic. OpenCode has notified all affected users via email and is working with Anthropic, OpenAI, and Google to address the incident. Users are advised to revoke and replace their API keys and review their account activity for any unauthorized usage. Access issues have also been reported by some users trying to log in. The situation remains ongoing as OpenCode investigates the breach further. 3 sources 56

Extracted Entities

OpenCode Hacked: User credentials leaked

The full story

Extracted Entities

Attack Types (1)

CWE Weaknesses (1)

Tools (1)