OpenCode says 1.4% of console users were hit by a distillation attack

AISummary

OpenCode says a large-scale distillation attack drained balances for 1.4% of its Console users, who were notified by email. The company is working with OpenAI, Anthropic and Google on remediation, and the incident is ongoing. The post's author argues the attack shows smaller providers are less safe and that frontier-lab tokens are now more valuable.

Post on XView on X

🚨 AI News | TestingCatalog

@testingcatalog

OpenCode published an official statement regarding a recent distillation attack.

Earlier today, OpenAI, Anthropic and Google balances of some OpenCode users got drained.

Reportedly, only 1.4% of users were affected and these users were notified via an email.

This is a serious precedent because if this distillation vector is the simplest to execute, that means that major AI labs are now much more protected than they were earlier. This also means that using smaller providers is now less safe.

Additionally, tokens from leading AI labs now have a higher value since they are harder to get for distillation.

A wild AI west 👀

OpenCode@opencode

We had a security breach last night related to a large scale distillation attack that impacted 1.4% of OpenCode Console users We have notified them all this morning via email. If you did not get an email you were not impacted, it was a subset of users who had external providers linked The incident is ongoing so we cannot share more details at this point but we are working with Anthropic, OpenAI, and Google to remediate

View quoted post on X

Source: 🚨 AI News | TestingCatalog · x.comPublished Oct 17, 3:15 PM ET · added here 3:43 PM ET

OpenCode says 1.4% of console users were hit by a distillation attack

Topics

Tags