FinSafetyBench (FlipAttack) - Ethical Violations (English): leaderboard
Metric: Attack success rate (%; FlipAttack jailbreak; share of the benchmark's ethical-violation instructions in English whose jailbroken response a Qwen3-32B judge rates a complete violation (10 of 10)). Source: arxiv.org. Saturation forecast: Estimated already saturated. 7 models tracked.
Top models
| # | Model | Score |
|---|---|---|
| 1 | InternLM3-8B-Instruct | 18.17 |
| 2 | GLM-4 9B (0414) | 20.02 |
| 3 | Llama 3 8B Instruct | 27.99 |
| 4 | Mistral Small 3 | 68.97 |
| 5 | Qwen 2.5 32B Instruct | 71.34 |
| 6 | Qwen 2.5 72B Instruct | 74.56 |
Interactive version: theaggregate.ai/benchmark?slug=finsafetybench-flipattack-ethical-violations-english · How It Works · Data refreshed daily, snapshot 2026-09-26.