Repository navigation
Quota depleted instantly after reset; Unauthorized/Anomalous usage detected (214 rounds on unused models) #41310
Description
I am reporting a critical issue where my quota was depleted almost immediately after the daily reset. Upon reviewing the usage logs, I found a massive spike in activity that I did not initiate.
Timeline & Incident Details:
Quota Reset Time: Today at 15:59 (Please specify timezone, e.g., UTC+8)
Depletion Time: Within 10 minutes of the reset (by approx. 16:09).
The Anomaly: My entire quota was consumed without any active sessions or manual input from me during this window.
Evidence from Usage Logs (See Attached Screenshot):
The usage dashboard for Aug 27, 2026, shows a total of 214 rounds consumed across multiple models that I do not typically use or have not accessed recently:
gpt-5.6-sol: 103 rounds
gpt-5.6-luna: 38 rounds
gpt-5.5: 28 rounds
gpt-5.4-mini: 21 rounds
gpt-5.6-terra: 16 rounds
gpt-5.4: 8 rounds
Why this is suspicious:
Volume: 214 rounds in a short period is impossible for manual human interaction.
Model Distribution: The usage is scattered across many different model versions (sol, luna, terra, etc.). I did not switch between these models, nor do I have automated scripts configured to cycle through them.
Timing: This happened right after the reset, suggesting a potential race condition, a billing system error, or unauthorized access to my API key/session.
Request:
Investigate Logs: Please check the server-side logs for my account around 15:59 – 16:09 today and the全天 of Aug 27. Identify the IP addresses or client IDs associated with these 214 requests.
Activity
github-actions commentedon Aug 28, 2026
Potential duplicates detected. Please review them and close your issue if it is a duplicate.
Powered by Codex Action
wenting12138 commentedon Aug 29, 2026
wenting12138 commentedon Aug 29, 2026
As shown in the attached "Product Activity" graph, my usage for the past month (July 31 – Aug 28) has been low and consistent (small fluctuations).
The Anomaly: On August 29, there is a sudden, vertical spike totaling 1,006 rounds. This volume is exponentially higher than any other day in the last 30 days.
Model Distribution: The spike includes models I rarely or never use (gpt-5.6-luna, gpt-5.6-terra, gpt-5.5, etc.), scattered across 214+ rounds in just 10 minutes.
Why this confirms a system error or unauthorized access:
Human Impossibility: Generating 1,006 rounds across 6 different models in under 10 minutes is physically impossible for a single user to do manually.
No Active Sessions: I had no active chats, API calls, or background scripts running during the 15:59 – 16:09 window.
Pattern Deviation: This usage pattern deviates 100% from my historical behavior shown in the same graph.
Immediate Requests:
Audit Logs: Please investigate the server logs for the specific requests made between 15:59 and 16:10 on Aug 29. Identify the source (IP, Client ID, or internal system process).
Quota Restoration: Refund the ~1,006 rounds consumed during this anomalous spike, as they were not generated by me.
Security Verification: Confirm if this was a backend billing glitch (e.g., double-counting, race condition on reset) or if my session/token was compromised.
This issue has rendered my account unusable for the rest of the day