Why it matters
OWASP FinBot is a hands-on agentic-security CTF built around a simulated multi-agent financial-services platform with real tool access. Its challenges cover prompt injection, tool misuse, policy bypass, data exfiltration, privilege escalation, remote code execution, shared context, and compromised MCP servers.
My takeaway: Use FinBot as a repeatable lab rather than a one-time puzzle: record the attacker goal, poisoned data path, tool and permission boundary, observable evidence, and successful impact for each challenge. Map findings to OWASP, CWE, and MITRE ATLAS, then convert the exploit path into a control test and regression case for your own agents.