OpenCode 官方回应 API 密钥被蒸馏攻击事件
OpenCode 被人盗刷了三家大厂的 API 余额，只有 1.4% 用户中招，搞 API 的朋友可以看看自己的密钥安全。
OpenCode 用户此前遭遇蒸馏攻击，OpenAI、Anthropic 和 Google 的账户余额被消耗一空。据称只有 1.4% 的用户受到影响，这些用户已收到邮件通知。该事件表明大型 AI 实验室的防护体系已明显加强。小型服务商面临的安全风险则相对更高。
OpenCode published an official statement regarding a recent distillation attack.
> Earlier today, OpenAI, Anthropic and Google balances of some OpenCode users got drained.
> Reportedly, only 1.4% of users were affected and these users were notified via an email.
This is a serious precedent because if this distillation vector is the simplest to execute, that means that major AI labs are now much more protected than they were earlier. This also means that using smaller providers is now less safe.
Additionally, tokens from leading AI labs now have a higher value since they are harder to get for distillation.
A wild AI west 👀
