OpenAI said it is working with OpenCode to help affected OpenAI API customers recover service and receive refunds for API credits consumed during a recent attack. The response followed OpenCode’s disclosure that an older system scheduled for deprecation had been breached, potentially exposing user-hosted third-party model API keys. According to the company, the incident affected 1.4% of Console users. With those keys, attackers could impersonate users and make paid model calls, and some community members reported abnormal charges running into the hundreds of dollars. OpenAI also granted OpenCode access to Daybreak Blue, a defense permission framework that lets vetted security teams face fewer refusals when using advanced models for legitimate defensive work. OpenCode co-founder Dax Raad had previously said some requests were blocked by safety restrictions while the team was investigating the attack. He later thanked OpenAI, saying Daybreak played a key role in the response and remains active. Thibault Sottiaux also urged other security teams to apply for Daybreak Blue before an incident happens rather than waiting until they are under attack.
OpenAI Product and Platform lead Thibault Sottiaux said the company has worked with OpenCode to help affected OpenAI API customers restore service and receive refunds for API credits consumed during the attack.
Earlier, OpenCode disclosed that an older system nearing retirement had been breached, potentially exposing user-hosted third-party model API keys and affecting 1.4% of Console users. If attackers obtained those keys, they could impersonate users and call paid models. Community members had already reported abnormal charges worth hundreds of dollars.
Beyond addressing user losses, OpenAI also provided OpenCode with Daybreak Blue defense access. OpenCode co-founder Dax Raad had previously complained that some requests were blocked by safety restrictions while the team was using frontier models to investigate the intrusion. Daybreak Blue allows vetted security teams to face fewer refusals during legitimate defensive work.
Raad later thanked OpenAI and said Daybreak played a critical role in the defense effort and is still running. Sottiaux also said other security teams can apply for Daybreak Blue in advance instead of waiting until they are attacked to seek authorization.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
