Original Summary

My OpenAI API key got hacked this morning, and the bot started using my key for something in Chinese.<p>&quot;No worries,&quot; I thought, &quot;I have a $30 spend limit setup.&quot; When I came back to my desk an hour later, I had $285 in unauthorized charges.<p>As it turns out, OpenAI will let you create a spend limit _without_ checking &quot;enforce spend limit.&quot; If you don&#x27;t check enforce, it&#x27;s meaningless. So even though my account showed that I had a $30 spend limit, it still let the hacker blow right past it by hundreds of dollars.<p>I&#x27;ve submitted a dispute, but wanted to let other people know so it doesn&#x27;t bite you, too. You can check your spend limits at https:&#x2F;&#x2F;platform.openai.com&#x2F;settings&#x2F;organization&#x2F;limits

  • 情报分类：商业与市场研究
  • 分类依据：内容涉及商业、投资或市场动态
  • 信息来源：Hacker News 新项目
  • 发布时间：2026/9/26 05:08:39