OpenCode confirmed a security vulnerability linked to a large-scale distillation attack, affecting 1.4% of its Console users. Third-party API keys from OpenAI, Anthropic, Gemini and other services stored in user workspaces may have been exposed, with attackers draining credits for model training. Users reported unauthorized charges of $400 to $1,700. OpenCode has alerted users, and Anthropic has forcibly revoked all suspected leaked Claude API keys.
OpenCode launched the second phase of "Operation Cheepseek" on September 25, making the $60 credit for DeepSeek V4.1 Flash on OpenCode Go permanent. The credit had been temporarily raised from $15 to $60 and was scheduled to end on September 20; the Go page now shows $60 with the original $15 crossed out.
On June 11, Xiaomi's MiMo team launched MiMo Code, an AI coding assistant built on OpenCode technology. It features persistent memory, infinite context processi