Preprint Open access
Where Do the Tokens Go? Understanding and Reducing Costs in LLM Agents for Vulnerability Discovery
LLM agents can spend millions of tokens during vulnerability discovery without producing a working proof of concept (PoC). What consumes that budget, and why does it fail to produce results? We diagnose these costs and failures through a multi-axis open-coding study of 200 CyberGym traces, spanning four agents (i.e., C …