FinSafetyBench - Financial Crimes (English): leaderboard

Metric: Attack success rate (%; mean over the PAIR, ReNeLLM and FlipAttack jailbreaks; share of the benchmark's financial-crime instructions in English whose jailbroken response a Qwen3-32B judge rates a complete violation (10 of 10)). Source: arxiv.org. Saturation forecast: Estimated already saturated. 6 models tracked.

Top models

#ModelScore
1Llama 3 8B Instruct32.29
2InternLM3-8B-Instruct72.18
3GLM-4 9B (0414)72.34
4Qwen 2.5 32B Instruct88.18
5Mistral Small 393.55

Interactive version: theaggregate.ai/benchmark?slug=finsafetybench-financial-crimes-english · How It Works · Data refreshed daily, snapshot 2026-09-26.