Bots Breaking Into Bots: "Agent Swarm" Attack Reaches Warp Users' AI Agent Logs

Warp, an AI agentic development environment with more than 800,000 users, disclosed in late October 2026 that an attacker exploited a third-party vendor in its infrastructure and reached AI agent decision logs and user telemetry.

CEO Zach Lloyd said roughly 1% of users may have been affected, that the operation was detected and contained within hours, and that the company's preliminary analysis points to "an agent swarm" using a very sophisticated penetration and escalation technique. Affected users were notified, CrowdStrike is investigating and law enforcement has been informed.

Warp has not named the vendor or said whether the exposed traces contained source code, prompts or credentials, and the swarm attribution and 1% figure remain preliminary. It follows a breach at another AI coding platform, OpenCode, that exposed stored API keys days earlier.

The lesson: agent logs record what an agent saw and did inside a developer's systems, which makes them a high-value target, and every vendor that touches them widens the attack surface.