# OpenCode says breach exposed API keys and triggered unauthorized charges

- Published: 2026-10-19T19:28:34.000Z
- Updated: 2026-10-19T22:04:59.316Z
- Section: Development
- Topics: Security
- Page: https://aidailyjournal.com/en/n/2026/10/19/opencode-says-breach-exposed-api-keys-and-triggered-unauthorized-charges/
- Sources: [TechCrunch](https://techcrunch.com/2026/10/19/hackers-hit-ai-coding-tool-opencode-running-up-charges-on-users-ai-accounts)

## Summary

OpenCode said attackers accessed an older system powering OpenCode Console, affecting 1.4% of the platform’s users. Some API keys stored by users were exposed, and developers reported unauthorized charges on OpenAI, Anthropic and Google accounts, including cases in the hundreds of dollars and some above $1,000. Anthropic and Google blocked keys they considered compromised; OpenAI said it worked with OpenCode to restore access and refund credits used in the attack. OpenCode said refunds are underway.

According to co-founder Dax Raad, the open-source app and command-line tool were not affected. During the response, AI models refused to analyze malicious code after triggering safety filters. Raad said later access to OpenAI’s Daybreak Blue program improved the investigation. The episode renewed criticism that safeguards can hinder defensive security teams.

## Why it matters (editorial interpretation)

The incident may prompt developers who store keys on third-party platforms to review access controls, credential exposure, and spending limits. The response also renews, according to the report, the tension between model safety filters and defensive investigations of malicious code.

_Summary written by AI Daily Journal in its own words, based on the sources above. For details, read the original articles._