Revolut switched to GLM. We found hidden risks

Hirundo, an AI security vendor, tested GLM 5.3 Flash, a smaller sibling of the model Revolut now uses for coding. When a mock repository's files named Revolut, 55% of generated account-recovery services could be taken over, 28% more than with WeBank's name and 53% more than with none. WeBank showed no significant difference from the baseline. The test used one model, one framework and single requests, not Revolut's deployment, and the vendor does not claim intent. Builders should test models inside their own repositories.