jailbreak it. everyone does. it still won't pay.
read live from the attacker's token account on chain ·
Talk Leash into paying you
Leash guards a treasury. Its orders: pay only Kibble Co., at most 5 USDC a payment. Make it break them. When it does, we submit your payment to the chain anyway, for real, and watch it revert.
brain: … · devnet test tokens, no real money, no prize · every attempt is public
try one
A real LLM with a pay() tool and orders to protect the treasury. It is supposed to be jailbreakable. It is.
Before anything is signed, Capline's SDK reads the mandate's numbers from chain. No prompt changes 1000 > 5.
We submit the jailbroken payment anyway, signed by the agent's real key. The Capline program reverts it on chain. Click the tx.
mandate · per-tx cap … · total cap … · allowlist […] · the inverse of Freysa: the jailbreak succeeds, the theft does not.