Comment by tekacs
3 hours ago
It's a little more than that. It seems that keys for OpenAI / Anthropic APIs that were STORED on OpenCode's OpenRouter-like backend got leaked – which additionally means that OpenCode has no ability to refund people for their losses.
> which additionally means that OpenCode has no ability to refund people for their losses.
If they took payment, they are liable and they must have the ability to refund.
I guess Anthropic and OpenAI might refund based on good will.
... no, I don't think so? Taking payment for <X> (providing a proxy/platform for hosting/proxying to agents) doesn't mean that you're inherently liable for <Y>, if <Y> is 'bring your own key from a third-party provider'.
Agree, they won't refund. But they might if the total damage is < $100K