availability-attack

Jul 29, 2026 5 min read

RolePlay Attack Forces LLMs Into 207x Inference Cost Amplification

Researchers from Zhiyi Mou et al. have published an attack framework showing that persona conditioning can weaponize LLMs' compulsion to maintain character, generating up to 207x token amplification — turning a standard API call into an economic availability attack against any service with per-token billing.