Grant de Swardt

“A compromised Claude session key was used to mint unauthorized Claude Code OAuth tokens... 'appeared to have been used by an unauthorized-looking third-party service to handle activity for other people, but they could not determine how it obtained access.'”

“De Swardt's experience shows that businesses deeply reliant on AI agents can be operationally crippled by account compromises with little recourse or transparency from providers”