@misc{indiciae3d3dfbaafcaa, title = {Persistent Billable State: Denial-of-Wallet Attacks and Defenses in Tool-Calling LLM Agents}, author = {Jinqian Zhang and Haojun Xia and Shujiang Wu and Jingkun Yue and Xia Zhang and Zhangpei Cheng and Bibo Tu}, year = {2026}, url = {https://arxiv.org/abs/2609.28585}, note = {Source identifier: 2609.28585} }