OpenCode has a security breach last that impacted 1.4% of console users
notmine1337
46 points
25 comments
October 18, 2026
Related Discussions
Found 5 related stories in 105.8ms across 9,867 title embeddings via pgvector HNSW
- OpenCode Hacked: User credentials leaked pranshuchittora · 830 pts · October 17, 2026 · 77% similar
- OpenCode: Potential provider key breach [Reddit] tobwen · 13 pts · October 17, 2026 · 72% similar
- OpenCode Hacked. Keys Stolen sergiotapia · 13 pts · October 17, 2026 · 71% similar
- Annoying and alarming things about OpenCode alekq · 379 pts · July 20, 2026 · 57% similar
- OpenCode 2.0 gmays · 472 pts · October 14, 2026 · 56% similar
Discussion Highlights (4 comments)
nl
> We had a security breach last night related to a large scale distillation attack that impacted 1.4% of OpenCode Console users > We have notified them all this morning via email. If you did not get an email you were not impacted, it was a subset of users who had external providers linked Further: > Third party keys saved in your workspace may have been exposed https://x.com/WispyWinter/status/2111542806099722698/photo/1 Does anyone understand why they are calling this a distillation attack?
anygivnthursday
Also discussed earlier here: https://news.ycombinator.com/item?id=50133401
cdurth
So a breach occurs and they recommend people rotate keys? But they claim fraud and break everyone's access with existing keys? Why anyone uses their services, or even the harness product at this point is beyond me. They just shill cheap and crappy models for training and make boneheaded decisions and "mistakes".
geye1234
I use Pi, but I think its updates and its extensions' updates are the biggest security gap I have right now. I'm not even sure what they keep updating TBH. Any recommendations?