OpenCode 通报大规模蒸馏攻击，1.4% Console 用户受影响

OpenCode 官方通报大规模蒸馏攻击，1.4% Console 用户受影响

AI 导读

OpenCode 就近期一起蒸馏攻击发布官方声明，称 OpenAI、Anthropic 和 Google 部分 OpenCode 用户的余额被耗尽，仅 1.4% 用户受影响，已通过邮件通知。作者认为这一蒸馏路径若是最易执行的，说明主流 AI 实验室的防护比此前更强，使用较小供应商的安全性下降，主流实验室的 token 也更难被用于蒸馏。

正文

OpenCode published an official statement regarding a recent distillation attack.

Earlier today, OpenAI, Anthropic and Google balances of some OpenCode users got drained.

Reportedly, only 1.4% of users were affected and these users were notified via an email.

This is a serious precedent because if this distillation vector is the simplest to execute, that means that major AI labs are now much more protected than they were earlier. This also means that using smaller providers is now less safe.

Additionally, tokens from leading AI labs now have a higher value since they are harder to get for distillation.

A wild AI west 👀