Unauthorized Usage of Claude 3.5 Sonnet Model on Our Account

[sweet falcon]

Hi @lime panther -- how are you storing your key?

are the requests done in front-end or is it a backend process?

[lime panther]

they Key has been stored in our app source code and my gf and I only testing the app, so it's secure and no one else has access to our app to extract the key

[sweet falcon]

is the app source code stored on the front-end or is it on the backend?

[sweet falcon]

and does this app run locally only?

[lime panther]

okay we have the key in our Firebase app ( backend) and we assume it's safe and no one has access to it
we stored the key in the app as well for some request as well. and again no one has access to the firebase or our app!
my gf and I just use it 😄

[sweet falcon]

does your app has a frontend? or is it pure backend calling and it's not on the internet at all?

And is the source code on github or all private?

[lime panther]

the source code is private
the key has been used in our firebase app
and we recently used it in out app which is located in my mobile and my gf's phone
so I don't know how the code has been leaked!!

[sweet falcon]

ooh so a native app??

[lime panther]

I don't mind about $20 that I lost 😄
but I don't think the key got compromised from my app / firebase and that's why I'm trying to figure out

yes it's an iOS app,

please check the intervals between each request
it show's which app ( LibraChat, Cline) were sending all of these request

[sweet falcon]

can you share your email in DM or via an email to [email protected]

[lime panther]

I don't know these apps!
but I know there is a website that called https://www.librechat.ai/ and I found this rep https://github.com/cline/cline

[sweet falcon]

yeah those are very popular apps :-?

ah just got your mail

[sweet falcon]

will continue via email

[lime panther]

@sweet falcon Please consider our app is local and only my gf and I have been testing the app
I can't see any point that our key got stolen from our side
I can revoke it but I wanted to follow up with you guys first

[sweet falcon]

taking a bit -- sorry about the wait. I'm looking thru the traffic related to the apps that's linked to your account

[sweet falcon]

replied