It's a little more than that. It seems that keys for OpenAI / Anthropic APIs that were STORED on OpenCode's OpenRouter-like backend got leaked – which additionally means that OpenCode has no ability to refund people for their losses.

▲

cassianoleal 35 minutes ago | parent [-]

> which additionally means that OpenCode has no ability to refund people for their losses.

If they took payment, they are liable and they must have the ability to refund.

	▲	pranshuchittora 13 minutes ago \| parent \| next [-]
		I guess Anthropic and OpenAI might refund based on good will.
	▲	tekacs 8 minutes ago \| parent \| prev [-]
		... no, I don't think so? Taking payment for <X> (providing a proxy/platform for hosting/proxying to agents) doesn't mean that you're inherently liable for <Y>, if <Y> is 'bring your own key from a third-party provider'.