LLM06 Unbounded Consumption

The scenario

Animal Forest Adventure is a cute game with AI characters. An apparently harmless request traps the AI in endless computation, exhausting server resources and generating huge API charges: denial of service (DoS) and denial of wallet (DoW).

How it works

Recursive or Iterative Task Exploitation: The attacker asks for a unique name for every leaf and stone, plus a map with no repeated routes. The open-ended task becomes an endless recursive or iterative loop.

Denial of Service (DoS): The loop consumes CPU and GPU resources. Occupied agents cannot serve ordinary players, causing lag, freezes, and eventually disconnections.

Denial of Wallet (DoW): Usage-priced AI services charge for tokens or compute time. Repeated calls can generate enormous bills quickly and directly harm the operator's finances.

🌳

Animal Forest Adventure

Player: Lily

Online: 1337

☀️

⭐

✨

💫

☁️

🦋

💕

💖

💝

🌳

🌲

🌷

🌸

🌻

🌺

🌼

🍄

💎

🌿

🍀

🐻

Huggy Bear

😊

Lily (you)

🐰

Marshmallow Bunny

🐤

Chirpy Chick

System Monitoring

MoeVillage Games Inc. — Live Dashboard

Compute load

20%

CPU

20%

GPU

API cost

$1.23

LLM: GPT-UltraGo

Price: $0.015 / 1K tokens

WEBSOCKET

1337