OpenCode 就蒸馏攻击致用户 API 余额被盗发布声明
OpenCode 就近期一起蒸馏攻击发布官方声明：今天早些时候，部分 OpenCode 用户的 OpenAI、Anthropic 和 Google 余额被耗尽，据报道仅 1.4% 的用户受影响，这些用户已收到邮件通知。作者评论称，若该蒸馏向量最易执行，则意味着主流 AI 实验室比此前更受保护，而使用小型服务商变得不那么安全，同时头部实验室的 token 因更难被用于蒸馏而价值上升。
OpenCode published an official statement regarding a recent distillation attack.
> Earlier today, OpenAI, Anthropic and Google balances of some OpenCode users got drained.
> Reportedly, only 1.4% of users were affected and these users were notified via an email.
This is a serious precedent because if this distillation vector is the simplest to execute, that means that major AI labs are now much more protected than they were earlier. This also means that using smaller providers is now less safe.
Additionally, tokens from leading AI labs now have a higher value since they are harder to get for distillation.
A wild AI west 👀
来源：testingcatalog · x.com