AI got expensive in visible ways this month: AWS is hiking GPU prices, teams are eating six-figure token bills, and routers/proxies like LiteLLM and OpenRouter are becoming core infra to keep costs sane. AI coding tools (Codex, Copilot, Claude Code) are everywhere but noisy, generating a lot of shaky code and surprising bills.
Security-wise, stolen keys, anonymous GitHub 0‑days, agent framework vulns, and yet another LastPass breach all underline that your AI plumbing is now as risky as the app code sitting on top of it.
Key Events
/AWS GPU instance prices will increase by 20% starting July 1.
/A company received a £300,000 AI token bill for June and shut down most AI tools.
/LiteLLM is migrating its core proxy implementation from Python to Rust to improve throughput and reduce overhead.
/An anonymous GitHub account is mass-dropping undisclosed 0-day vulnerabilities.
/LastPass suffered another breach via a Klue supply-chain incident, exposing customer names, emails, and support records.
Report
AI infra costs stopped being abstract this month: teams are getting six-figure token bills while AWS is hiking GPU prices. At the same time, routing proxies and local/quantized models are finally good enough that they’re reshaping how you design anything that calls an LLM.
token costs and gpu prices are punching through budgets
AWS is raising GPU instance prices by 20% on July 1, so any GPU-heavy stack on EC2 just got more expensive. A separate thread had GPU and RAM hardware prices expected to fall because current market prices are already below manufacturing cost, which makes the cloud markup stand out.
One company reported a £300,000 AI token bill for June and shut down most AI tools afterwards, while others mention monthly AI spend over $300,000.
UBS says about 60% of companies are already shifting to cheaper or open-source models due to cost, and the “tokenmaxxing” era is being declared over.
At the same time, Coinbase halved its token spend by routing to cheaper inference models, while OpenAI and NVIDIA both cut per-token costs roughly in half or better through software optimizations.
A Stanford-style analysis found roughly 70–71% of ChatGPT-class queries could be answered by local models, implying a lot of current frontier-model traffic is wasted money.
proxies and routers are becoming your ai control plane
LiteLLM is migrating its proxy core from Python to Rust, explicitly to push higher throughput and lower overhead at scale. The same stack now integrates Valkey semantic caching, which users report cuts LLM costs by about 28%.
Centralizing traffic has sharp edges: one team exhausted its entire monthly OpenAI/Anthropic quota in four hours because multiple teams were sharing keys behind a single proxy.
On the hosted side, OpenRouter is already routing 47 trillion tokens per week, with the LongCat‑2.0 MoE model in the global top 3 by daily volume and Hermes agents alone consuming 26 trillion tokens.
New routers like Wayfinder and Sakana’s orchestrator are pushing deterministic and dynamic query routing so that cheap models handle the easy 70% of requests and expensive frontier models only see the hard tail.
ai coding tools: more code, more bugs, higher bills
Codex usage grew more than fivefold in the first half of 2026 and is nearly universal inside OpenAI, with many users saying it beats Claude for implementation and debugging.
But real users also report Codex and Claude routinely introduce new bugs while fixing existing ones, which matches growing complaints that AI-generated code on GitHub is low-quality and hard to maintain.
Microsoft Copilot Enterprise is in a worse spot, with one report claiming 80% of its outputs were falsified and many users describing “nonsensical” suggestions they have to manually clean up.
On the upside, Spotify-level deployments show AI-assisted PRs can reach 73% of changes, and services like QA Wolf claim 80% automated test coverage in production pipelines.
Costs are biting here too: Claude Code is now about five times more expensive, and users complain about both its pricing and hitting token limits, making Codex or cheaper models more attractive despite their own quirks.
Alongside that, engineers are talking openly about a “codebase slopocalypse” as poorly reviewed AI code piles up and erodes morale, with some devs describing depression and identity crises as more of their work shifts to supervising models.
security surface: keys, repos, and agents are all hot
An AWS EC2 instance was compromised and launched by an attacker using a stolen access key, which is exactly the failure mode people warn about when keys leak.
At the same time, an anonymous GitHub account is mass‑dropping undisclosed 0‑days, increasing the chance that some random dependency in your tree quietly went from “fine” to “known-vulnerable.” On the secret-management side, LastPass took another hit via a Klue supply‑chain breach that exposed customer names, emails, and support records, further degrading trust even though vaults stayed encrypted.
Agent infra is soft too: most MCP servers tested had no security review even though they act as RPC endpoints for LLMs, and teams report MCP agents routinely get access to hundreds of APIs or internal systems through a single server.
LangGraph’s ecosystem is seeing the same pattern, with the AgentBreak tool already finding four high‑severity vulnerabilities in open‑source agents.
For data, many teams now explicitly block agents from writing to production databases, preferring read replicas or manual approvals after seeing how easy it is to ship even a basic SQL‑injection bug when AI is allowed to draft forms and queries.
local and quantized models are now actually usable
Local stacks like llama.cpp and audio.cpp keep getting faster, with audio.cpp’s TTS running up to 5× faster on CUDA than equivalent Python code and NASA evaluating llama.cpp for on‑device medical AI in space missions.
ComfyUI’s new native INT8 support claims better quality than FP8 and nearly 2× speed, and its Krea 2 workflows can run usable models in as little as 8 GB of VRAM.
NVIDIA’s NVFP4 quantization is hitting around 130 tokens per second for Qwen3.6‑27B on a single RTX 6000 Blackwell at 256k context, while specialized plugins can generate 1024px images in under a second on a 4090.
On the inference side, NVIDIA’s own software optimizations have delivered up to 5× performance improvements, effectively cutting token costs to about one‑fifth of previous levels for the same hardware.
A Stanford analysis suggests roughly 71.3% of ChatGPT queries could be answered by local models, and users are already using vLLM for high‑throughput server workloads while keeping llama.cpp or Ollama for low-latency or privacy-sensitive tasks.
What This Means
AI features are crossing the line where infra costs, routing layers, and security risks matter as much as the model choice, and the tooling is finally catching up. The pattern across threads is that naïve 'just call the best model' integrations are turning into expensive, fragile systems, while cost‑aware routing, local inference, and tighter security boundaries are becoming the default.
On Watch
/Postgres 19’s new graph database features plus high Graph-RAG rebuild costs suggest that moving beyond simple vector search will come with real infra and maintenance overhead.
/tmux 3.7’s floating panes and tools like Bohay/Herdr are turning the terminal into a multi-agent control room, which may change how devs run and debug AI workflows locally.
/Deno 2.9’s Desktop bundler can turn TypeScript projects into ~19MB self-contained desktop apps with optional Chromium, offering a lighter path than Electron for internal tools.
Interesting
/- A Git extension in Rust tracks which AI wrote each line of code, highlighting the intersection of AI and software development.
/- Deno Desktop's app size reduction feature can compress applications from 65MB to just 19MB, making it more efficient for developers.
/- Local AI tools can extract structured JSON from documents while ensuring all processing remains local, enhancing data privacy.
/- Implementing a local evaluation set with JSONL cases can help avoid the "new model feels better" trap, ensuring a clear comparison of outputs before model changes.
/- The DSpark decoding method boosts throughput by 51% to 400% across various models, showcasing advancements in AI efficiency.
We processed 10,000+ comments and posts to generate this report.
AI-generated content. Verify critical information independently.
/AWS GPU instance prices will increase by 20% starting July 1.
/A company received a £300,000 AI token bill for June and shut down most AI tools.
/LiteLLM is migrating its core proxy implementation from Python to Rust to improve throughput and reduce overhead.
/An anonymous GitHub account is mass-dropping undisclosed 0-day vulnerabilities.
/LastPass suffered another breach via a Klue supply-chain incident, exposing customer names, emails, and support records.
On Watch
/Postgres 19’s new graph database features plus high Graph-RAG rebuild costs suggest that moving beyond simple vector search will come with real infra and maintenance overhead.
/tmux 3.7’s floating panes and tools like Bohay/Herdr are turning the terminal into a multi-agent control room, which may change how devs run and debug AI workflows locally.
/Deno 2.9’s Desktop bundler can turn TypeScript projects into ~19MB self-contained desktop apps with optional Chromium, offering a lighter path than Electron for internal tools.
Interesting
/- A Git extension in Rust tracks which AI wrote each line of code, highlighting the intersection of AI and software development.
/- Deno Desktop's app size reduction feature can compress applications from 65MB to just 19MB, making it more efficient for developers.
/- Local AI tools can extract structured JSON from documents while ensuring all processing remains local, enhancing data privacy.
/- Implementing a local evaluation set with JSONL cases can help avoid the "new model feels better" trap, ensuring a clear comparison of outputs before model changes.
/- The DSpark decoding method boosts throughput by 51% to 400% across various models, showcasing advancements in AI efficiency.