Denial of Wallet
An economic attack paradigm targeting AI agents in which an agent is induced to call external paid APIs in an infinite loop, causing bills to surge. Unlike traditional denial-of-service attacks, it does not disrupt service availability.
Timeline (last 90 days)
The four vulnerability types Elena's team found were: prompt injection leaking the system prompt, tool escalation bypassing restrictions to access restricted APIs, a data leakage path across tenant boundaries, and a denial of wallet loop that could burn through $200 of API credits overnight.
The five starting scenarios suggested by the civilian red team testing framework include: prompt injection, jailbreak variants, tool escalation, data leakage and denial of wallet.
Denial of Wallet is a new paradigm relative to denial of service (DoS): it does not break any service, but instead causes an AI Agent, when induced, to call external paid APIs in an infinite loop, sending bills soaring to thousands of dollars within hours.
Defenses against denial of wallet attacks include: setting hard spending caps per session or user, detecting abnormal call frequency patterns, setting a maximum number of iterations for looping tool calls, and implementing real-time cost alerts.
All Facts (4)
The four vulnerability types Elena's team found were: prompt injection leaking the system prompt, tool escalation bypassing restrictions to access restricted APIs, a data leakage path across tenant boundaries, and a denial of wallet loop that could burn through $200 of API credits overnight.
50%UnverifiedThe five starting scenarios suggested by the civilian red team testing framework include: prompt injection, jailbreak variants, tool escalation, data leakage and denial of wallet.
50%UnverifiedDenial of Wallet is a new paradigm relative to denial of service (DoS): it does not break any service, but instead causes an AI Agent, when induced, to call external paid APIs in an infinite loop, sending bills soaring to thousands of dollars within hours.
50%UnverifiedDefenses against denial of wallet attacks include: setting hard spending caps per session or user, detecting abnormal call frequency patterns, setting a maximum number of iterations for looping tool calls, and implementing real-time cost alerts.
50%