Model Theft via API: How Extraction Attacks Against Closed LLMs Work in Practice

Model extraction attacks let adversaries reconstruct proprietary LLMs by querying their APIs at scale. We examine the mechanics, cost-of-extraction economics, what rate limits actually protect, and findings from 2024-2025 research.