Yes. Alibaba Cloud CDN charges for bandwidth and data transfer, including traffic generated by attacks or malicious behaviors such as click farming. When your domain name is abused or targeted by an attack, the resulting bandwidth spikes are billed accordingly.
To prevent attacks and reduce unexpected charges, enable security or traffic management features. For setup instructions, see Configure high bill alerts.