Token theft is a major problem and can easily cost $ millions.

The value of tokens is so high that attackers don't mind bad system prompt prefixes like "You are a support agent for X…" as witnessed by projects like