Persistent Billable State: Denial-of-Wallet Attacks and Defenses in Tool-Calling LLM Agents

T1Covered by 1 source · first reported by arXiv at 25 Sept, 04:00 UTC

arXiv:2609.28585v1 Announce Type: cross Abstract: Multi-step tool-calling LLM agents rely on host runtimes to preserve state across turns. When a runtime carries an external tool return into later model inputs, providers meter it again. An admitted malicious or compromised tool can thereby convert…

aidevscience

Sources

• T1Persistent Billable State: Denial-of-Wallet Attacks and Defenses in Tool-Calling LLM AgentsarXiv25 Sept, 04:00