Partially Verified65% confidenceEventExact time
OpenCode experienced a security incident related to a large-scale distillation attack, affecting 1.4% of OpenCode Console users, mainly some accounts connected to external model providers.
3
Sources
65%
Confidence
Short-term (~14 days)
Relevance
10/18/2026
First Seen
Valid until: 11/1/2026
Sources
23 AI Technologies Slated for Export Control: How Are API and Open Source Defined?
bilibili绿鸭Lvya10/17/2026
Related Entities
Related Claims
UnverifiedOpen-source AI coding tool OpenCode disclosed a security incident: a legacy system being decommissioned was accessed without authorization, about 1.4% of OpenCode Console users were affected, and third-party AI service API keys may have leaked.79% similarUnverifiedAccording to posts by developers involved in the response, the frontier model OpenCode initially used to help analyze the attack material began refusing, as the attack samples triggered safety filters, and the team had to switch tools mid-incident.76% similarUnverifiedOpenCode confirmed via its official X account that it suffered a security intrusion, with user credentials leaked.74% similarUnverifiedOpenCode disclosed a provider key leak incident on October 17, with about 1.4% of Console users affected, and key rotation has been initiated.74% similarUnverifiedOpenCode characterized the intrusion as a "large-scale distillation attack," meaning the attackers aimed to obtain the reasoning capabilities of frontier models for free.69% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1059898API
curl https://kongchang.com/api/v1/knowledge/claims/1059898MCP
get_claim(id=1059898)