Dev Seeks Help: OpenRouter API Key Suspected Hacked, $70 Credits Drained Overnight
Fit-Spring776 · reddit · 2026-08-01
A developer posted on Reddit seeking help after suspecting their OpenRouter API key was compromised. According to the post, the account was hit with a massive number of requests for expensive models (like Opus 5 fast and GPT 5.6 Sol) overnight, completely draining the remaining $70 in credits.
The developer emphasized that they typically only use cheap models costing less than $1/M tokens (like DeepSeek) and had never used the expensive models billed to their account. They also stated the key was stored locally and should not have been exposed. An OpenRouter support ticket has been submitted, but the developer is asking the community for immediate advice as their workflow heavily relies on the platform.
More from Safety
- Users report Gemini's memories can't actually be deleted even after wiping chat history — ThrowRA_Purpose2025 · 2026-10-16
- You consented, but your friends didn't: Meta's Muse sparks AI privacy debate — LuizaJarovsky · 2026-10-16
- AI agents aren't 'going rogue' — frontier labs are skipping security basics — Sam_Witteveen · 2026-10-16
- Proofpoint to buy Varonis for $6.3B in cash, a 52% premium, closing in 2027 — shashib · 2026-10-16
- China's MofCom & MIIT update AI export controls, covering LLMs and high-sensitivity agents — terryyuezhuo · 2026-10-16
- Vibe-coded dashboard leaked franchise financials before anyone logged in — shauntrennery · 2026-10-16