FinBot CTF Is Live: A Hands On Companion to the OWASP GenAI Security Project OWASP Gen AI Security Project
The environment provides training and testing material. Deliberately vulnerable simulations are not evidence of a new production incident or independent verification of a mitigation.
The environment provides training and testing material. Deliberately vulnerable simulations are not evidence of a new production incident or independent verification of a mitigation.
What the source establishes
OWASP describes FinBot as a simulated financial services capture the flag environment with multiple agents and real tool access. Its challenges include injection, tool misuse, policy bypass and data exfiltration, including risks crossing shared context and MCP tools.
Moona assessment and evidence limits
The environment provides training and testing material. Deliberately vulnerable simulations are not evidence of a new production incident or independent verification of a mitigation.
Verification scope
Moona reviewed the retained source on 29 September 2026. Source acquisition and review establish provenance for this account; they do not reproduce an experiment, validate a vendor deployment or authorize an action.
Sources
This analysis interprets third-party reporting, research and announcements. Moona is not the original reporter of the underlying events.