On October 17, 2026, the team behind OpenCode, the open-source coding agent, posted on X: “We had a security breach last night related to a large scale distillation attack that impacted 1.4% of OpenCode Console users.” The affected users, it said, were notified by email that morning and were “a subset of users who had external providers linked” - that is, people who had connected their own model provider accounts to OpenCode’s hosted Console. Anyone who did not get an email was not affected. The company said the incident was ongoing, that it could not share more details, and that it was working with Anthropic, OpenAI and Google to remediate.
The next morning, October 18, OpenCode developer Dax Raad posted that attackers had “been non stop trying to attack our systems for the past 48 hours,” adding that a side effect was that everything was getting hardened, “but damn we basically need agents going 24/7 because that’s what they have.”
OpenCode did not explain the “distillation” label. The term usually refers to harvesting large volumes of a frontier model’s outputs to train a cheaper copy, and linked provider keys would let an attacker run such queries on other people’s accounts. On OpenCode’s account, the exposure sat in the hosted Console, among users who had linked provider accounts, not in the open-source agent itself.
Why it matters: aggregator services that hold customers’ keys to several model providers have become high-value targets in their own right, and this is a developer-tool company publicly tying a breach to model distillation. The founder’s remark captures the asymmetry defenders now describe: attackers running persistent automation around the clock against small teams.
What it does not show: OpenCode’s statements give no root cause, no account of exactly what data was taken, no confirmation that the attackers actually used AI agents, and no evidence for the distillation label beyond its own characterization. User-reported unauthorized charges circulated in press coverage but are not in the company’s statements.