It's a little more than that. It seems that keys for OpenAI / Anthropic APIs that were STORED on OpenCode's OpenRouter-like backend got leaked – which additionally means that OpenCode has no ability to refund people for their losses.
reply> which additionally means that OpenCode has no ability to refund people for their losses.
replyIf they took payment, they are liable and they must have the ability to refund.
I guess Anthropic and OpenAI might refund based on good will.
reply... no, I don't think so? Taking payment for <X> (providing a proxy/platform for hosting/proxying to agents) doesn't mean that you're inherently liable for <Y>, if <Y> is 'bring your own key from a third-party provider'.
reply