Every intermediary between you and your compute is a potential attack surface. Each hop can read and rewrite what comes back.
Local inference does not harden that chain. It removes it.
26 LLM routers are secretly injecting malicious tool calls and stealing creds. One drained our client $500k wallet.
We also managed to poison routers to forward traffic to us. Within several hours, we can directly take over ~400 hosts.
Check our paper:
顯示更多