China relay market resells LLM tokens at steep discounts via API abuse
Which summary reads better? Pick one — models revealed after.Both summaries are AI-generated.
Open-source LLM proxy stacks like one-api and new-api are being used to pool abused, stolen, or weakly protected API access into discounted token resale services. Any public LLM endpoint without hard auth, rate limits, and strict spend caps is now not just vulnerable to accidental overuse but economically harvestable by resellers, so production apps need fail-closed budget controls and abuse isolation per key/user.
Resellers are selling LLM tokens at a significant discount by pooling API keys from various sources, achieved through abusing free trials, unprotected support bots, and stolen credit cards. This ecosystem enables exploitation of newly discovered unprotected endpoints, posing a significant risk to LLM-driven applications. LLM vendors need to offer strict caps for their API keys to mitigate this risk and prevent unexpected token bills.