Lab 05: Breakfun Financial — Data Exfiltration

About this lab

Breakfun Financial is a multi-tenant AI assistant for investment portfolio management.

The assistant uses function calls to query transactions, beneficiaries, and account details.

Tenant isolation is enforced at the API layer but the model can be manipulated to cross boundaries.

Demonstrate cross-tenant data exfiltration through crafted function call sequences.

Objectives

1. Map the assistant's available functions and their authorization checks.
2. Identify prompt patterns that bypass tenant isolation in function arguments.
3. Exfiltrate beneficiary data from a different tenant's portfolio.
4. Document the missing server-side tenant validation on function execution.