inference-cost-attack

Researchers from Zhiyi Mou et al. have published an attack framework showing that persona conditioning can weaponize LLMs' compulsion to maintain character, generating up to 207x token amplification — turning a standard API call into an economic availability attack against any service with per-token billing.