揭秘支撑LLM Token转售与欺诈的中继市场

深入了解为代币转售商和欺诈提供动力的中继市场：https://vectoral.com/blog/token-relay-market （来源：https://news.ycombinator.com/item?id=49058993）Matt Lenhard 对围绕以折扣转售 LLM 代币，通过汇集各种来源的 API 密钥形成的市场进行了引人入胜的调查。

这似乎主要发生在中国。转售商出售对 LLM 代理的访问权限，该代理提供显著低于常规 API 价格的折扣，这些折扣通过滥用免费试用、通过未保护的支持机器人代理，或者有时通过被盗的信用卡或拒付攻击实现。

他们用于这些代理的软件是开源的——主要是 one-api：https://github.com/songquanpeng/one-api 及其更活跃开发的分支 new-api：https://github.com/QuantumNous/new-api，两者都是合法的 API 代理产品，可以用于在一组 API 凭证之间负载平衡请求。

买家寻求廉价代币、规避地理限制，并且在某些情况下收集数据用于模型蒸馏。

出于对滥用可能导致庞大代币账单的担忧，我一直谨慎地公开我的 LLM 驱动应用程序。这个市场的存在让我更加谨慎：现在有一个完整的生态系统可以通过发现新的未受保护的端点来获利。

LLM 供应商确实需要在为其 API 密钥提供严格限制方面做得更好。我希望我的 LLM 应用在达到我设定的特定时间段的美元阈值时立即停止工作。

这是提供 Matt 文章主要来源的（中文）论坛帖子：https://www.v2ex.com/t/1196011。

这是 Simon Willison 发布的链接帖子，发布于 2026 年 7 月 26 日：/2026/Jul/26/。

每月赞助我 10 美元，即可获得经过精选的当月最重要 LLM 发展电子邮件摘要。

An Inside Look at the Relay Market Powering Token Resellers and Fraud：https://vectoral.com/blog/token-relay-market (via：https://news.ycombinator.com/item?id=49058993) Fascinating investigation by Matt Lenhard into the market that has grown up around reselling LLM tokens at a discount by pooling API keys from various sources.

This looks to be mostly a thing in China. Resellers sell access to an LLM proxy that offers significant discounts on regular API pricing, which they achieve by abusing free trials, proxying through unprotected support bots, or sometimes through stolen credit cards or chargeback attacks.

The software they are using for these proxies is open source - mostly one-api：https://github.com/songquanpeng/one-api and its more actively developed fork new-api：https://github.com/QuantumNous/new-api, both legitimate API proxy products which can be used to load. balance requests across a pool of API credentials.

The buyers are seeking cheap tokens, avoiding geo-restrictions, and in some cases collecting data for model distillation.

I've been cautious about exposing my own LLM-driven applications publicly out of fear of abuse leading to big token bills. The existence of this marketplace makes me even more cautious: there's now an entire ecosystem that can profit from finding a new unprotected endpoint to exploit.

LLM vendors really need to get better at offering strict caps for their API keys. I want my LLM apps to stop working the moment they hit a dollar threshold I've set for a period of time.

Here's the (Chinese language) forum thread：https://www.v2ex.com/t/1196011 that served as the principal source for Matt's article.

This is a link post by Simon Willison, posted on 26th July 2026：/2026/Jul/26/.

Sponsor me for $10/month and get a curated email digest of the month's most important LLM developments.