Claude Code is reported to have two caching bugs that can silently increase API costs by 10-20 times.

robot
Abstract generation in progress

ME News message, March 31 (UTC+8), a Reddit developer leaked that, using Ghidra, an MITM proxy, and radare2 reverse engineering, they dismantled a 228MB binary file of the standalone installed version of Claude Code. They found two independent caching bugs that could increase API costs by 10–20x without users knowing. The related analysis has been submitted to GitHub (issue #40524). Anthropic marked it as a regression bug and assigned someone to handle it. The first bug exists in the custom Bun runtime used by the standalone installed version; an error in the billing identifier replacement logic causes each request to trigger full cache rebuilding. The second bug affects users who use --resume or --continue to restore sessions; introduced since v2.1.69, a cache prefix mismatch causes the entire conversation history to be read from cache to instead be fully rewritten. Previously, Anthropic engineers had confirmed that users reached the usage limit “much faster than expected.” (Source: PANews)

View Original
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
  • Reward
  • Comment
  • Repost
  • Share
Comment
Add a comment
Add a comment
No comments
  • Pin