Interchangeable encrypted reasoning blocks let attackers decode hidden chain-of-thought and leak PII and credentials from major LLM APIs.