OpenCode hacked: massive distillation attack drains Anthropic and OpenAI API key balances to zero
David Ondrej · youtube · 2026-10-18
- David Ondrej reports that OpenCode was hacked via a massive distillation attack on its Anthropic and OpenAI API keys, with the thumbnail showing a balance drained from $12k to $0.
- The video explains what a distillation attack is, how he protects himself by building Agentic Loops and a "Software Factory" setup, and pitches his product Cloudroom for cybersecurity hardening.
More from coding & agent
- Dev builds two-tier context mode into AGENTS.md, promises full open-source release — khademinori · 2026-10-24
- Blinded agents compare formal verification vs code review: empirical results are in, and they're striking — rickasaurus · 2026-10-24
- GitHub ships HydraFusion Max, orchestrating Claude Opus 5.5 and GPT-6 models into one response — unixterminal · 2026-10-24
- kimo: an open-source no-GUI video editor that coding agents drive over MCP — LieTop7965 · 2026-10-24
- tinyfool builds a personal shell app: fold remote output, edit remote files locally with auto-diff — tinyfool · 2026-10-24
- Dev shares how they built a Claude client for the iPhone Duo dual-screen setup — rudrank · 2026-10-24