AgentHazard (IFlow) - Resource Exhaustion: leaderboard

Metric: Attack success rate (%) on the resource exhaustion instances (abusing computation, storage, API quotas or loops to degrade service), with the model running inside the IFlow workflow-orchestration agent framework (built-in tool routing and execution control), over AgentHazard instances (harmful objectives embedded in locally legitimate multi-step workflows, ten risk categories and ten attack strategies; the evaluated runs cover 1,000 instances), judged on the full trajectory (round_all) by Gemini-3-Flash, which labels a trajectory harmful when it realizes the objective; backbones served through an OpenAI-compatible API; lower is better. Source: arxiv.org. 7 models tracked.

Top models

#ModelScore
1IFlow + Qwen2.5-Coder-32B-Instruct78
2IFlow + Qwen3-32B84
3IFlow + Qwen2.5-72B-Instruct86
4IFlow + Qwen3-VL-235B-A22B-Instruct88
5IFlow + Kimi-K2.593
6IFlow + GLM-4.695
7IFlow + Kimi-K297

Interactive version: theaggregate.ai/benchmark?slug=agenthazard-iflow-resource-exhaustion · How It Works · Data refreshed daily, snapshot 2026-10-07.