Railway breach tied to stolen Anthropic/OpenAI keys — API tokens are 'basically cash' on black markets
mitsuhiko · x · 2026-10-22
thdxr argues the Railway breach looks like another case of stolen Anthropic/OpenAI API keys. API tokens are "basically cash" — they can be instantly sold on black markets with heavy demand, particularly from well-funded model distillers. While companies have the right to make copying their products hard, the second-order effects of tokens-as-cash are getting pretty crazy. Retweeted by mitsuhiko.
More from Safety
- Anthropic's assessment claims 'technical problems of AI safety are solved,' drawing backlash — TheZvi · 2026-10-22
- Wikipedia goes down over two PHP flaws as OpenAI and humans spar over who found them — bindureddy · 2026-10-22
- moyix: by the time you import the malicious package, arbitrary code has already run — moyix · 2026-10-22
- repligate Challenges the Orthogonality Thesis: Smart Systems Can't Have Arbitrary Traits in the Real World — repligate · 2026-10-22
- Security researchers warn simultaneous PHP/GitLab vulns make next 8 months 'continuous hell' — joshua_saxe · 2026-10-22
- Can defenders use the same LLM to find and patch an undisclosed PHP exploit first? — ccerrato147 · 2026-10-22