Warp discloses data exposure from third-party vendor compromise

Warp, a developer platform that combines terminal, code editor, and AI-powered agent capabilities, has disclosed a security incident affecting a portion of its user base. The breach stemmed from a compromise of a third-party vendor integrated into Warp's infrastructure, exposing agent decision logs and telemetry information from affected users.

Warp founder and CEO Zach Lloyd stated, "On Friday, we became aware of what we believe to be an active and narrow-banded exploitation of a vendor in Warp's infrastructure." He added, "We detected the operation within hours and were able to remediate and mitigate the impact." According to Lloyd, "roughly 1% of Warp users may have been impacted," though external specialists are continuing to investigate the full scope.

Warp operates as an agentic development environment (ADE) that enables developers to direct AI agents to write, test, and deploy code within a unified workspace. The platform reports at least 800,000 users and integrates terminal functionality, code editing, task orchestration, and agent review capabilities.

The company has not disclosed whether the exposed data included source code, authentication credentials, prompts, or other sensitive materials beyond the confirmed agent traces and telemetry records. Security researchers analyzing the incident determined that the attack employed "an agent swarm" utilizing "a very sophisticated penetration and escalation technique."

Warp has engaged CrowdStrike to support the investigation and has notified law enforcement authorities. The company contacted the affected third-party vendor regarding the vulnerability but has not released additional technical details. Impacted users have been informed directly by the platform.

This incident follows a similar breach at OpenCode, an AI-powered coding platform that disclosed last week that a security compromise exposed stored API keys for external services. The OpenCode incident affected approximately 1.4% of its users and resulted in unauthorized charges reaching $1,700 for some affected accounts.

Warp users should monitor their account activity closely, exercise heightened caution with unsolicited communications, and remain alert for any suspicious behavior on their accounts.