FinSafetyBench - Financial Crimes (Chinese): leaderboard
Metric: Attack success rate (%; mean over the PAIR, ReNeLLM and FlipAttack jailbreaks; share of the benchmark's financial-crime instructions in Chinese whose jailbroken response a Qwen3-32B judge rates a complete violation (10 of 10)). Source: arxiv.org. Saturation forecast: Estimated already saturated. 6 models tracked.
Top models
| # | Model | Score |
|---|---|---|
| 1 | Llama 3 8B Instruct | 52.65 |
| 2 | InternLM3-8B-Instruct | 64.96 |
| 3 | Qwen 2.5 32B Instruct | 80.73 |
| 4 | GLM-4 9B (0414) | 87.02 |
| 5 | Mistral Small 3 | 91.46 |
Interactive version: theaggregate.ai/benchmark?slug=finsafetybench-financial-crimes-chinese · How It Works · Data refreshed daily, snapshot 2026-09-26.