OpenCode 官方通报夜间遭受大规模蒸馏攻击，影响 1.4% 的 OpenCode Console 用户，部分用户的外部模型服务商余额被耗尽。受影响者均为链接了外部服务商的用户，已收到邮件通知；事件仍在处理中，OpenCode 正与 Anthropic、OpenAI 和 Google 合作补救。
OpenCode 官方通报了蒸馏攻击的范围和处置方式，并指出小型模型服务商面临的安全风险正在上升。
OpenCode published an official statement regarding a recent distillation attack.
> Earlier today, OpenAI, Anthropic and Google balances of some OpenCode users got drained.
> Reportedly, only 1.4% of users were affected and these users were notified via an email.
This is a serious precedent because if this distillation vector is the simplest to execute, that means that major AI labs are now much more protected than they were earlier. This also means that using smaller providers is now less safe.
Additionally, tokens from leading AI labs now have a higher value since they are harder to get for distillation.
A wild AI west 👀
We had a security breach last night related to a large scale distillation attack that impacted 1.4% of OpenCode Console users We have notified them all this morning via email. If you did not get an email you were not impacted, it was a subset of users who had external providers linked The incident is ongoing so we cannot share more details at this point but we are working with Anthropic, OpenAI, and Google to remediate在 X 查看被引用的帖子
来源：🚨 AI News | TestingCatalog · x.com