CISA and Canada warn your AI bill can be attacked. They call it denial-of-wallet.

On 22 October 2026 CISA, the Canadian Centre for Cyber Security and partners published guidance on managing AI token consumption. It lists rising and unpredictable costs, reduced availability, degraded performance, token exhaustion, and denial-of-tokens or denial-of-wallet attacks as risks.

If your product calls a paid AI model, someone else's traffic can become your invoice or your outage. A meter nobody watches is an attack surface.

Set spend caps and alerts on every AI provider key, monitor token use over time, and cache reusable context. Write down which features break if your provider slows you down.