Post-Cutoff

Anthropic revoked Claude API keys believed affected by the OpenCode breach

Lydia Hallie @lydiahallieX

Why it matters

Anthropic-side confirmation of remediation for the OpenCode key leak.

Summary

Lydia Hallie (Claude Code team) says Anthropic worked with OpenCode and revoked Claude API keys it believes were affected, and suggests users who saved a key in OpenCode create a new one. ~31k views when read via fxtwitter on 2026-10-18.

Archived text

We’ve been working with OpenCode on yesterday’s breach and have revoked Claude API keys we believe were affected.

If you saved a key in OpenCode and want to be extra careful, please create a new one!

Quoting @opencode: We had a security breach last night related to a large scale distillation attack that impacted 1.4% of OpenCode Console users

We have notified them all this morning via email. If you did not get an email you were not impacted, it was a subset of users who had external providers linked

The incident is ongoing so we cannot share more details at this point but we are working with Anthropic, OpenAI, and Google to remediate

Source: x.com/lydiahallie/status/2111563956666110287Archived 2026-10-18 via fxtwitter (unofficial).Counts: 31,826 views, 650 likes, 20 reposts, 43 replies (at fetch time)

Cited in

  1. Policy & safety 109 days after the cutoff

    OpenCode breach leaks stored provider API keys