Analysis
Token Torching: How AI Cost Attacks Threaten Your Business
Publication date not yet evaluated · Added bitsight.com
Page published
Coverage timeline
Single-source analysis — one report is available.
Why it matters
Token torching turns an organization's own AI usage limits and billing into an attack surface, exposing businesses to economic loss and service degradation without any data theft or system compromise.
Bitsight's Emma Stevens explains "token torching," a Denial-of-Wallet (DoW) attack in which an adversary crafts prompts or workflows that force an LLM system to burn through excessive tokens, compute time, and money. The piece maps the risk to OWASP's LLM10:2025 Unbounded Consumption category, noting impacts such as denial of service, economic loss, and service degradation.