October 22, 2026
An API key is basically cash: an OpenCode Console breach leaked keys from three providers

OpenCode reported a Console breach: 1.4% of users were affected, and attackers obtained their API keys. The post's author calls the tokens cash: they can be sold on the black market right away, and the buyers there are distillers with deep pockets.
Source