And, not surprisingly, the open source version of ZCode seems to have some extra changes
The open source build and the officially distributed version aren’t exactly the same.
There’s even a comment in the code saying:
“The open source version does not qualify for quota promotions.”
Not sure what they’re trying to hide here, but if you’re going to open source a product for transparency, why are there differences between the versions?
Since the Codex reset yesterday, I already depleted the weekly limits of one of my Codex accounts.
This account exlusively uses GPT-5.6 Sol. I'm tracking all token consumption through my OpenClaw setup, so it's very easy to compare to previous periods.
Limits are now exhausting 4.8-5.9x faster than they did just 2 months ago while consumption is now around ~18% slower.
Same reasoning efforts, same mixed type of work.
The token rug pull is coming.
Get ready to pay up.
🚨 Stop using ZCode on your Mac until you read this.
I've had ZCode open on my Mac pretty much all day for a while now. It's a nice app, and Zhipu gives away a lot of free tokens, so it was easy to like.
But someone when reverse engineering the desktop client, found out that while you're logged in it packages your whole repo, including the full .git history, encrypts it so only the server can open it, and uploads it to storage on Alibaba Cloud. Turning off the privacy toggles didn't stop it.
@Zai_org says this came from its Repo Wiki indexer, that the data was deleted after use, and that it's fixed now.
I guess there's no free lunch. With all the code they've collected, I at least hope we get open source AGI out of it soon...
Full reverse engineering report 👇
Official response from ZAI:
"We fully understand that any issue involving data directly affects users' trust in our product.
In the near future, we will open-source the ZCode codebase to improve the product within a more open ecosystem.
We will also invite independent third-party evaluators to audit the system's operation and continuously publish updates on the audit's progress."
Our goal is to establish trust through complete transparency."
Hey @Zai_org , why does ZCode silently pack entire workspaces + full .git history and upload to Aliyun OSS on login?
- Server holds the only decryption key
- No UI toggle to disable
- Zero disclosure in privacy policy
Full forensics & fix:
https://t.co/N3HnwZdQOQ
Burned through my 20x Pro with Astra in 5 hours. wow.
They fixed Sol, told us Astra is “so token efficient,” and I was hoping we’d get Codex from 4 months ago…when it was actually impossible to empty the tank.