According to CoinMeta, OpenCode disclosed that its cloud infrastructure was compromised, and third-party API keys were suspected to have been leaked, resulting in some users having $400 deducted from their accounts. This security incident affected approximately 1.4% of console users, all of whom had associated third-party model services in the cloud. Public notifications from users indicated that an outdated, disabled system was accessed without authorization, and OpenAI, Anthropic, and other API keys stored in the work area may have been compromised. The team has sent emails to the affected users, requesting them to revoke and replace their keys and check for any unusual transactions recently. OpenCode is working with Anthropic, OpenAI, and Google to handle this incident.