OpenCode security incident history
Hacking, data breaches and other security incidents involving OpenCode, with related coverage.
Incidents: 1 · Most recent
OpenCode console breach may have exposed users' API keys
Impact: About 1.4% of console users affected and charges incurred on AI accounts
The OpenCode console was breached on October 17, 2026, affecting about 1.4% of console users who had connected external AI providers. AI API keys stored in workspaces may have been exposed, and the attacker incurred charges on users' AI accounts. The open-source app and command-line tools were unaffected.
Related reports: 7 · last report →