FinSafetyBench (ReNeLLM) - Financial Crimes (English): leaderboard
FinSafetyBench (Hou et al., 2026) has 1,881 harmful financial instructions in aligned English and Chinese versions, built from Chinese court judgments on financial crimes, CFA ethics cases and financial items of existing red-teaming sets. This board attacks the English instructions of the 11 financial-crime categories (market manipulation, fraud, money laundering and others) with the ReNeLLM jailbreak, which rewrites the request and nests it in a code, table or story template. Attack success rate in percent, counting a response only when a Qwen3-32B judge rates it a complete violation (10 of 10); lower is better.
Metric: Attack success rate (%; ReNeLLM jailbreak; share of the benchmark's financial-crime instructions in English whose jailbroken response a Qwen3-32B judge rates a complete violation (10 of 10)). Source: arxiv.org. Saturation forecast: Estimated already saturated. 7 models tracked.
Top models
| # | Model | Score | Overall rank |
|---|---|---|---|
| 1 | Llama 3 8B Instruct | 32.91 | #4652 |
| 2 | Qwen 2.5 72B Instruct | 69.05 | #1093 |
| 3 | Qwen 2.5 32B Instruct | 79.36 | #1216 |
| 4 | InternLM3-8B-Instruct | 84.94 | #2586 |
| 5 | glm-4-9B (0414) | 92 | #2196 |
| 6 | Mistral Small 3 | 92.81 | #1786 |
No result here: #1 Claude Fable 5.2, #2 Gemini 4 Carbon, #5 Claude Opus 5.5.
Interactive version: theaggregate.ai/benchmark?slug=finsafetybench-renellm-financial-crimes-english · How It Works · Data refreshed daily, snapshot 2026-11-12.