# OpenCode Says a Console Breach Exposed Linked Anthropic, OpenAI and Google API Keys Used in a Distillation Attack

Times of AI Desk · 2026-10-20 · Security

[https://timesof.ai/2026/10/opencode-console-breach-api-keys-distillation](https://timesof.ai/2026/10/opencode-console-breach-api-keys-distillation)

> OpenCode disclosed a breach of its hosted Console that affected 1.4% of Console users who had linked external providers, with earliest exposure at 00:30 UTC on Oct. 17, BleepingComputer reported. Some victims were charged up to $1,700. Co-founder Dax Raad said attackers targeted the company for at least 48 hours in a distillation attack.

Stolen API keys are now being burned for frontier-model outputs at someone else's expense. **BleepingComputer** reported on **Monday, October 19** that **OpenCode**, the open-source coding-agent project, disclosed a breach of its hosted Console. It affected **1.4%** of Console users who had linked external providers such as Anthropic, OpenAI and Google, with the earliest exposure at **00:30 UTC on October 17**. Some victims were charged up to **$1,700**, and some Google Cloud projects were suspended.

Co-founder **Dax Raad** said attackers had targeted the company for at least **48 hours** in what he described as a distillation attack, and that OpenCode's own models refused to help with defensive analysis until it switched to OpenAI's **Daybreak** cybersecurity model. OpenCode mentioned possible reimbursement. We covered [Anthropic's anti-distillation measures](https://timesof.ai/2026/10/anthropic-distillation-defenses-90-99pct) and [Daybreak](https://timesof.ai/2026/05/openai-launches-daybreak-ai-cybersecurity-initiative) separately.

## Limits

- OpenCode's X post is quoted via BleepingComputer. Unverified search-snippet claims about a legacy system and locally stored keys are omitted.

## Sources

- [BleepingComputer: OpenCode hack exposes API keys amid AI distillation attacks (October 19, 2026)](https://www.bleepingcomputer.com/news/security/opencode-hack-exposes-api-keys-amid-ai-distillation-attacks/)
- [Times of AI: Anthropic distillation defenses (October 13, 2026)](https://timesof.ai/2026/10/anthropic-distillation-defenses-90-99pct)
- [Times of AI: OpenAI Daybreak cybersecurity initiative (May 11, 2026)](https://timesof.ai/2026/05/openai-launches-daybreak-ai-cybersecurity-initiative)