API usage above the limit set by me, using models I don’t use with amounts of tokens above the amount I normally use. I think the server has been hacked! [chrome_dghk1EKuZB]

[image] PaulBellow: What type of app have you deployed? Is it an app with the API key embedded poorly? I would cancel your keys, create new ones, and look for your leak. Is a simple chatbot with premade system prompts in Portuguese. The key is encrypted, I don’t think it’s a simple key leak.…

Did you have the key on the back-end server or embedded into your app? Good on changing it. Are you saying you’re not using GPT-4 model at all? It really seems like you’ve got a key leak somewhere…

The model in question that I don’t use is the gpt-3.5-turbo-16k, I haven’t used it for a long time. I have no other members in my organization. I never got to use more than 20,000 tokens while using the api. I was already close to the limit, the api did not respect the limit that was set and made re…

Another one appeared but it’s close to the time of the previous one in 5 minutes [chrome_6a3cmRvaHq]

Do you have more than one key? I would reach out to help.openai.com if you haven’t yet. Good luck.

Not just the new one I generated after deleting the previous one. The system does not allow having 0 keys

I want to remove my credit card but there is no option to do that

Delete all your API keys, with final new one and ensure the old one is is the one deleted (would be nice if you could delete them all) stop using the API for a while, and see if someone is still using the account in the five minute increments. Your requests with prior API keys should fail (although…

I reported it on the OpenAi Help but, for irony of destiny, it’s a chatbot

[image] luiseduardoribeirogu: The key is encrypted, I don’t think it’s a simple key leak Encrypted where? If this was in a client-side JS app, or mobile or desktop app it can still be captured by nefarious individuals.

Glitch or the server was hacked

API

luiseduardoribeirogu August 25, 2023, 11:19am 14

OpenAi already refunded me today and the attack stopped when the key was deleted. Thanks everyone for the support

Topic		Replies	Views
Crazy price is automatically added for chatgpt4 (Dangers of Encrypted Client Side Keys) API	18	1140	February 21, 2024
API key stolen, charged lost of $, no response from support Community	25	4427	February 22, 2024
Massive Usage Today? Is it a fraud situation? API api-billing	48	5281	June 1, 2024
API charged a lot despite NO usage API	12	2508	February 21, 2024
Sudden spike in consumption API api	5	478	March 24, 2025

Glitch or the server was hacked

Related topics