Unverified50% confidenceEventExact time
OpenCode disclosed a provider key leak incident on October 17, with about 1.4% of Console users affected, and key rotation has been initiated.
1
Sources
50%
Confidence
Short-term (~14 days)
Relevance
10/18/2026
First Seen
Valid until: 11/1/2026
Sources
DeepSeek V4.1-Flash Released, OpenCode Key Leak Raises Agent Security Concerns
bilibili我叫王一一亿10/18/2026
Related Entities
Related Claims
UnverifiedOpenCode experienced a security incident related to a large-scale distillation attack, affecting 1.4% of OpenCode Console users, mainly some accounts connected to external model providers.74% similarUnverifiedAPI providers such as Stripe and OpenAI will proactively revoke a key upon detecting that it has been leaked.71% similarVerifiedOpenClaw carries security risks: because its built-in tools have extremely high permissions (capable of operating system files, reading browser information, and executing tasks online), any configured API Keys are highly susceptible to leakage if the machine is compromised.69% similarUnverifiedOpenCode confirmed via its official X account that it suffered a security intrusion, with user credentials leaked.68% similarUnverifiedUsers who have hosted provider keys in the Console are the affected parties, and these keys may already have been exposed.66% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1059861API
curl https://kongchang.com/api/v1/knowledge/claims/1059861MCP
get_claim(id=1059861)