Unknown api usage under Default project

I have two api keys; both were associated with their projects in Mar 1. However, in Mar 3, 4, 5, a usage of 28M tokens appeared under a Default project. At the same time there’s a small amount of token usage under my projects (consistent with my normal pattern).

It seems to me a bug in billing. Since all keys are associated with projects, the usage shouldn’t happen under the default project. I’m very sure I don’t have such a high usage. Leaked key might have caused the usage, but the usage should be under associated projects, not the default one.

Anyone had the same experience?

If you provide me the keys I’ll rack the fees to confirm.

Just kidding.

This is an extremely well managed company, just message them and request a refund.