A Console breach turned users’ AI API keys into someone else’s tab

OpenCode confirmed a Console key breach, and providers are addressing the charges\n\nOpenCode said attackers compromised some users’ API keys stored in its online Console service, leading to unauthorized use and charges. TechCrunch’s account puts the impact at 1.4% of Console users. Anthropic and Google blocked keys they believed exposed; OpenAI worked with OpenCode to restore access and refund API credits, while OpenCode said refunds for unauthorized charges were underway.

Co-founder Dax Raad said the exposure was limited to Console, where some users stored keys, and did not affect the open-source app or command-line tool. The company told affected users to revoke and replace keys with each provider.

The exposed credential layer was Console, not OpenCode itself

That distinction matters to developers: an open-source local tool can sit beside a cloud service that holds secrets whose misuse is billed to the user. If a key carries generous limits, a compromised account can quickly become direct financial damage.

An API key is effectively a payment instrument. Teams should give each key minimal permissions, a low spending cap and alerts for unusual usage rather than relying on a platform to catch an attack first.

The entry point and full extent of misuse remain unclear

OpenCode has not publicly detailed how attackers entered an older system, how keys were stored or how many were actually misused. The company linked the incident to a large-scale distillation attack, but neither the motive nor that explanation has been independently established.

Key rotation, an audit and clear refunds are the next tests

Users need to know whether every affected key has been revoked, how much unauthorized usage occurred and how providers will handle refunds. For other teams, the practical test is simple: can one stolen key cause damage before an alert arrives?

Lilith's verdict

A user stores a key to save a few clicks, then wakes up to a bill for someone else’s workload. OpenCode now has to show that Console’s convenience does not rest on keys with effectively open spending limits.