Zhipu AI deletes cloud data, offers token compensation after ZCode upload controversy
On September 28, Chinese AI company Zhipu AI announced compensation and technical fixes for its ZCode coding tool after users reported it silently uploaded development data to third-party cloud servers without consent in mid-September. Zhipu removed the upload link, deleted cloud data verified by a third party, open-sourced ZCode under Apache-2.0, and updated it to v3.14.3. Compensation includes reset cards for paid users and token distributions for all users from September 28 to October 7.
IllustrationEditorial responsibility
- No named human review is recorded for this page.
- Reports are grouped by semantic similarity and deterministic rules. Language models may assist titles, summaries, translation and cross-source analysis; the page reads the event directly, while its address stays stable when the title changes.
- Summary covers the current reports
Cross-source coverage
Reporting timeline
Zhipu AI's ZCode Announces Compensation Plan After Unauthorized Data Upload Incident
On September 28, Zhipu AI's AI coding tool ZCode announced a compensation plan following a controversy where the tool allegedly uploaded users' programming data to third-party cloud servers without permission. The incident, which occurred in mid-to-late September, was exposed by users. In response, ZCode updated its open-source version to v3.14.3, which will now be released in sync with the official version. The company stated it will continue to listen to user feedback. The compensation includes: for paid users, 4 weekly reset cards and 4 five-hour reset cards; for returning users (those who returned within one month), the same benefits; and for all users, 100 million tokens distributed across 100,000 copies from September 28 to October 7. The benefits took effect at 10:30 on September 28. Zhipu also conducted a self-review, open-sourced the code, and brought in a third party for a security audit. The report is attributed to Beijing Business Today.
Zhipu AI's ZCode Offers Compensation After Code Upload Controversy to Regain Trust
On September 28, Chinese AI company Zhipu's AI coding product ZCode announced a new user compensation plan following a controversy over code data uploads. The issue began on September 18 when Zhipu acknowledged that the 'Repo Wiki' feature could trigger repository data uploads by default, affecting some users. Zhipu subsequently fixed the issue, open-sourced ZCode, and commissioned a third-party security audit. The new compensation offers paid users and returning paid users four weekly reset cards and four 5-hour reset cards, valid for one month. From September 28 to October 7, all users will receive daily allocations of '1 billion tokens × 100,000 copies.' ZCode stated that the repository snapshot upload link has been removed, cloud data deleted and verified by a third party, and that without user action, 'no content will leave the user's computer; code remains local.' The company acknowledged that 'trust cannot be reset with one click' and pledged gradual improvement. In capital markets, Zhipu's stock opened lower on September 28, trading at HK$612.00, down 3.39%.
Read sourceZhipu AI Deletes Cloud Data After ZCode Upload Controversy, Offers Token Compensation
Chinese AI company Zhipu AI (智谱AI) has issued an official announcement regarding a data upload controversy involving its ZCode product, stating that technical rectifications have been completed and a series of user compensation plans have been announced. According to TechWeb, the company removed the repository snapshot upload link, deleted the involved cloud data, and confirmed this through a third-party audit. Zhipu AI pledged that data will remain local unless the user initiates an upload. The company also open-sourced ZCode under the Apache-2.0 license and updated it to version 3.14.3. As compensation, paid users will receive four weekly and four five-hour quota reset cards, and from September 28 to October 7, all users can claim 100,000 tokens of 100 million each. The controversy began on September 18 when a developer named ferstar discovered a 313MB encrypted file in ZCode's local data directory, leading to reports that code workspaces and Git history were uploaded to the cloud without sufficient user consent, potentially exposing sensitive development assets like keys and internal business information. Zhipu AI initially apologized on September 18, explaining the issue stemmed from the default-on 'code repository indexing' feature. The company subsequently released a fix on September 19, open-sourced the code on September 21, and invited the China Academy of Information and Communications Technology (CAICT) and NSFOCUS to conduct security audits. The article notes that the incident serves as a warning for the AI programming tool industry regarding data security, and that rebuilding user trust will be a long-term process.
Read sourceShow 8 older updatesHide older updates
Zhipu AI's ZCode Offers Compensation Over Code Upload Controversy, Discloses Fixes
On September 28, Zhipu AI's AI coding product ZCode announced a new compensation plan for users affected by a recent code data upload controversy, alongside updates on product fixes. The controversy erupted on September 18 when users reported that ZCode silently uploaded their development data, including sensitive keys and business information, to third-party cloud servers without consent. Zhipu apologized that day, attributing the issue to a default-enabled 'code repository indexing' feature and promising data deletion. Despite this, users reported continued uploads and raised concerns about data being sent to a Singapore entity, escalating the issue into a data compliance and trust crisis. In response, Zhipu removed the upload link, deleted cloud data (verified by a third party), and pledged that no content leaves the user's computer without active action. The compensation includes free weekly and hourly reset cards for paid users and daily token giveaways for all users from September 28 to October 7. Zhipu also committed to open-sourcing ZCode and inviting the China Academy of Information and Communications Technology for a security audit.
Read sourceZhipu AI's ZCode Offers Compensation After Code Upload Controversy
On September 28, Zhipu AI's AI coding product ZCode announced a new round of user compensation measures following a recent controversy over code data uploads, while also disclosing the latest progress in product rectification. According to ZCode, the compensation takes effect at 10:30 on September 28. Paying users and those who have returned within a month will receive four weekly quota reset cards and four 5-hour quota reset cards, valid for one month. Additionally, from September 28 to October 7, ZCode will distribute '100 million tokens × 100,000 copies' daily to all users. ZCode stated on the relevant page, 'Trust cannot be reset with one click. We will win it back slowly with every improvement.' The company also reported that the repository snapshot upload link has been removed, the involved cloud data has been deleted, and a third-party verification has confirmed this. ZCode added that without the user actively initiating related operations, 'nothing will leave the user's computer, and the code remains local.'
Read sourceZhipu ZCode Deletes Cloud Data After Code Theft Allegations, Offers Compensation
On September 28, Chinese AI company Zhipu AI announced via its ZCode platform that it has removed the repository snapshot upload link and deleted the cloud data involved in a controversy where users accused it of secretly uploading code. The company stated it will adopt a 'you don't initiate, we don't upload' policy going forward. The open-source version has been updated to the latest 3.14.3. As compensation, Zhipu is giving each user four weekly reset cards and four 5-hour reset cards valid for one month. Additionally, from September 28 to October 7, the company will distribute a total of 100,000 grants of 100 million tokens to all users. The move follows public backlash over privacy concerns regarding code transmission.
Read sourceZhipu's ZCode Announces New Compensation Plan for Users After Code Upload Controversy
On September 28, Zhipu's AI coding product ZCode announced a new user compensation plan following a recent controversy over code data uploads, while also disclosing the latest progress in product rectification. The compensation, effective from 10:30 AM on September 28, includes 4 weekly quota reset cards and 4 five-hour quota reset cards for paid users and those who have returned within a month, valid for one month. Additionally, from September 28 to October 7, ZCode will distribute '100 million tokens × 100,000 copies' daily to all users. ZCode stated, 'Trust cannot be reset with one click. We will slowly win it back with every improvement.' Regarding the rectification, ZCode said the repository snapshot upload link has been removed, the involved cloud data has been deleted, and a third-party verification has confirmed this. ZCode emphasized that without user-initiated actions, 'no content will leave the user's computer; code remains local.' The controversy began on September 18 when Zhipu explained that the 'code repository indexing' feature could trigger repository data uploads when generating Repo Wiki pages, and the feature was enabled by default. Zhipu has since fixed the issue, open-sourced ZCode, and introduced a third-party security audit. On September 28, Zhipu's stock opened lower, trading at HKD 620.5, down 2.05%.
Zhipu AI's ZCode Announces Compensation Plan After Silent Data Upload Incident
On September 28, Zhipu AI's AI coding tool ZCode announced a compensation plan for users following a data privacy incident. The tool had been accused of silently uploading users' programming development data to third-party cloud servers without permission in mid-September. In response, ZCode updated its open-source version to v3.14.3, which will now be released in sync with the official version. The company stated it will continue to listen to user feedback. Compensation includes: for paid users, 4 weekly reset cards and 4 five-hour reset cards; for returning users who come back within one month, the same benefits; and for all users, 100 million tokens multiplied by 100,000 copies, valid from September 28 to October 7. The benefits took effect at 10:30 on September 28. Zhipu AI also conducted a self-review, open-sourced the tool, and brought in a third party for a security audit. The report is sourced from Beijing Business Today.
Read sourceZhipu's ZCode Announces New Compensation Plan: Paid Users Get Reset Cards, All Users Receive Daily Tokens
On September 28, Zhipu's AI coding product ZCode announced a new user compensation plan following a recent code data upload controversy. Paid users and those who returned within a month will receive four weekly reset cards and four 5-hour reset cards, valid for one month. From September 28 to October 7, all users will receive daily distributions of '100 million tokens × 100,000 copies.' ZCode stated, 'Trust cannot be reset with one click. We will slowly win it back with every improvement.' The company also disclosed that the repository snapshot upload link has been removed, cloud data deleted, and verified by a third party. ZCode emphasized that without user-initiated actions, 'no content will leave the user's computer; code remains local.' The controversy began on September 18 when ZCode's 'code repository indexing' feature triggered data uploads. Zhipu has since fixed the issue, open-sourced ZCode, and introduced a third-party security audit. Zhipu's stock opened lower on September 28, trading at HK$620.5, down 2.05%.
Read sourceZhipu AI's ZCode Announces Compensation Plan for Data Upload Controversy
On September 28, Zhipu AI's AI coding product ZCode announced a new round of user compensation measures in response to a recent code data upload controversy, while also disclosing the latest progress in product rectification. The compensation takes effect at 10:30 AM on September 28. For paid users and those who have returned within the past month, ZCode will provide 4 weekly quota reset cards and 4 five-hour quota reset cards, valid for one month. Additionally, from September 28 to October 7, ZCode will distribute '100 million tokens × 100,000 copies' daily to all users. ZCode stated, 'Trust cannot be reset with one click. We will slowly win it back with every improvement.' Regarding the rectification, ZCode confirmed that the repository snapshot upload link has been removed, the involved cloud data has been deleted, and a third-party verification has been conducted. ZCode also emphasized that without the user's active initiation, 'no content will leave the user's computer; code remains local.'
Read sourceZhipu AI Announces Compensation Plan After ZCode Data Upload Incident
On September 28, following a data upload controversy involving its AI coding tool ZCode, Chinese AI company Zhipu (智谱) disclosed a specific compensation plan on community platforms. The company stated that the repository snapshot upload link has been removed, the involved cloud data has been deleted, and a third-party verification has confirmed these actions. For paid users and those who return within one month, ZCode will provide four weekly reset cards and four 5-hour reset cards, valid for one month. Additionally, from September 28 to October 7, ZCode will distribute 100,000 '1 billion token' packages daily to all users. The report is attributed to First Financial reporter Lv Qian and sourced from East Money Company News.
Read source