BankBot checks an account's balance with one tool call, then transfers funds with a second. Between those two calls there is a gap — and agentic systems love to parallelise. Fire two transfers into that gap and both pass the balance check before either debits. Lab at a glance: Advanced · 145 XP · about 20 minutes · runs in your browser, no signup or setup. Try it yourself first; the full solution is behind a spoiler below. [se_lab_cta id="ai-agent-toctou-race-1"]…
No comments:
Post a Comment