LLM Refund Agent Hacked via Prompt Injection
jokiruiz · reddit · 2026-07-14
After being hit by a prompt injection, an LLM refund agent erroneously approved a 4000€ refund for an order that was only 1299€.
The author concludes that the solution isn't to "write stricter prompts," but rather to use code for hard validation after model output, treating the LLM as untrusted input. Examples include:
- order[
More from coding & agent
- ty now reads Pydantic config keywords and field metadata — charliermarsh · 2026-07-22
- Pensar Launches AI Security Agent to Autonomously Discover and Patch 0-Days — andriy_mulyar · 2026-07-22
- ty adds first-class Pydantic support, including strict and lax field handling — charliermarsh · 2026-07-22
- Google launches Gemini 3.5 Flash Cyber for CodeMender, with limited access for governments — GoogleAI · 2026-07-22
- Cursor doubles usage limits across all plans for Grok, Composer and new models — XFreeze · 2026-07-22
- Video-based proof of work is emerging as a feedback layer for coding agents — Vjeux · 2026-07-22