Opencode

OpenCode's Exposed Keys Ignore the Budgets You Set

On 17 October OpenCode told 1.4% of its hosted Console users that the Anthropic, OpenAI and Google keys saved in their workspaces may have been exposed through unauthorized access to a legacy system being decommissioned, and called it a large scale distillation attack; the keys were there by design, because Console stores the credential and serves it through its gateway so members never see it, and the monthly budget Console offers is enforced by that gateway, so a lifted key used directly against the provider answers only to the provider's own limit: Anthropic caps spend per workspace but not on the Default Workspace, OpenAI's hard limit is per organization or project and not instantaneous, and Google offers billing alerts and no cap. Revoke at the provider, not in Console, and give every third-party gateway a capped workspace or project of its own.