OpenCode Breach Exposes User API Keys, Leading to Unauthorized Charges
Understand the story
On October 20, 2026, TechCrunch reported that the open-source AI coding tool OpenCode was breached. OpenCode said attackers broke into its legacy systems overnight, affecting about 1.4% of users of its online platform OpenCode Console, with some API keys stored on the platform leaked. Users have already reported unauthorized charges from abused keys, ranging from a few hundred dollars to over $1,000. Information disclosed so far includes the percentage of affected users, the leaked content (API keys), and the unusual charges users have incurred.
AI overview of reporting · Updated 3 h前
Reporting timeline
Explore different aspects of the story through its reporting.
- TechCrunch · AIHackers hit AI coding tool OpenCode, running up charges on users’ AI accounts
OpenCode said attackers breached its legacy systems overnight, affecting about 1.4% of users of its OpenCode Console online platform, and some API keys stored on the platform were leaked, with users reporting unauthorized charges of hundreds of dollars and even over $1,000.
Story heat trend
Current heat9·Comparable peak10（10/20 04:00）·Comparable change over 24 hours –
The trend compares the same continuously observed sources, which may cover fewer sources than the current heat score. Hover or select the chart to inspect each hour; use the left and right arrow keys to navigate.