Analysis · curated 21 Jul 2026
Token Torching: How AI Cost Attacks Threaten Your Business
First reported bitsight.com
Coverage timeline
Single-source analysis — first reported, latest, and curated coincide.
Why it matters
Token torching turns an organization's own AI usage limits and billing into an attack surface, exposing businesses to economic loss and service degradation without any data theft or system compromise.
Bitsight's Emma Stevens explains "token torching," a Denial-of-Wallet (DoW) attack in which an adversary crafts prompts or workflows that force an LLM system to burn through excessive tokens, compute time, and money. The piece maps the risk to OWASP's LLM10:2025 Unbounded Consumption category, noting impacts such as denial of service, economic loss, and service degradation.