Someone is burning through your API key on the most expensive models right now… · @harden_369741 · TwKit

@harden_369741

Someone is burning through your API key on the most expensive models right now, and you're paying for it. OpenCode just disclosed a breach: a "large scale distillation attack" hit a legacy system they were already decommissioning, and about 1.4% of Console users who had external providers linked may have had their OpenAI, Anthropic or Google keys exposed. The part that got me is the business model. The attackers didn't want passwords or credit cards. They wanted keys, and they burned them running queries against frontier models. Some users woke up to bills in the hundreds of dollars. Your key, their queries, your invoice. I've rotated keys after breaches before and it always felt like theater. This one is different. A leaked password costs you a reset. A leaked API key bills you per token until you notice. Distillation attacks used to be about stealing the model. Now the model stays put and the victim funds the theft. That's a business model, not a bug. When's the last time you checked which keys are sitting in tools you installed six months ago? #AI #Security #DevTools

曝光 24 · 评论 0 · 点赞 0 · 书签 0