{"as_of":"2026-08-09T03:15:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:7246a1bfc1aa1d8dd356f7c5e52321370820b36fc4b32eddb4bd02bbdb1bb0a2","coverage":[{"denominator":36,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":36,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-08T15:35:36.192526Z","state":"measured"},{"denominator":37,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":37,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-10T18:08:01.503806Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-11T05:26:00.916602Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"cited_work":{"arxiv_id":"2502.06418","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2502.06418","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Robust watermarks leak: Channel-aware feature extraction enables adversarial watermark manipulation.arXiv preprint arXiv:2502.06418","venue":null,"work_id":"2b847398-91bb-4f15-ada6-cf8be8332897","year":null},"citing_paper":{"arxiv_id":"2604.06662","last_updated":"2026-04-08T04:28:56Z","snapshot_observed_at":"2026-07-06T22:55:06.424752Z","submitted_at":"2026-04-08T04:28:56Z","title":"Towards Robust Content Watermarking Against Removal and Forgery Attacks","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-10T18:08:01.503806Z"},"links":{"cited_paper":"/paper/2502.06418","citing_paper":"/paper/2604.06662"},"observation_digest":"sha256:9509c29015b1e4a69aa95b478fca7ced74b96e94d1beab8ff11a6647afc3433f","observation_id":"8fea8e91-117f-4e3c-b32b-8caf88bc128a","resolution":{"observed_at":"2026-05-11T05:26:00.926267Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2502.06418/citation-record","integrity":"/paper/2502.06418/integrity","json":"/paper/2502.06418/citation-record.json","paper":"/paper/2502.06418"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T15:35:36.034946Z","title":"write newline","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.034946Z"},"links":{"citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:8daf0b3f367db8f7735bd2f95f569f8b723375b356394d804136a1e426d4357b","observation_id":"e765546e-fe13-454b-b2be-2fb8b733059e","resolution":{"observed_at":"2026-08-08T15:35:36.034946Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T15:35:37.000876Z","title":"URL https://www.midjourney.com/home","venue":null,"work_id":"11591179-1cf9-4f5e-9f5a-5ce25f2b4347","year":2024},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.041046Z"},"links":{"citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:2b1c8d46ddcd9267a04cd379792abfa4fb6b655cd563f38326b82d3864d19c0d","observation_id":"48f13d3d-1314-4367-999b-5529b334b36d","resolution":{"observed_at":"2026-08-08T15:35:37.005432Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T15:35:36.986865Z","title":"URL https://openai.com/sora","venue":null,"work_id":"bf962b5d-49f5-4fbf-9f8c-686e51f68007","year":2024},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.045833Z"},"links":{"citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:b58b81ea8043276796b913ecd1f4e67b4bea048a2e297f75d96cbbe3399bfd23","observation_id":"3d4560ba-ebb6-4441-9760-196c756048f9","resolution":{"observed_at":"2026-08-08T15:35:36.991299Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T15:35:36.050480Z","title":"and Timofte, R","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.050480Z"},"links":{"citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:1f91287ebfab5a34ba39ffc0c698f3711e3c81d7e000129bcdc3d31a5a67023f","observation_id":"90f0654c-de35-4938-80f4-bb630cd9a700","resolution":{"observed_at":"2026-08-08T15:35:36.050480Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T15:35:36.963000Z","title":"Combined dwt-dct digital image watermarking","venue":null,"work_id":"ed1fbd10-23ed-4dae-aed2-dfa96394cc54","year":2007},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.055433Z"},"links":{"citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:7cdffe3d1abdc70d7b9c699c8e38c690f20219592cf43cb84afb6348975e7d01","observation_id":"f8754f3f-931b-4e78-ae37-ff49fe64bf88","resolution":{"observed_at":"2026-08-08T15:35:36.967617Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.08573","last_updated":"2024-06-07T03:38:35Z","snapshot_observed_at":"2026-08-07T16:54:42.698164Z","submitted_at":"2024-01-16T18:58:36Z","title":"WAVES: Benchmarking the Robustness of Image Watermarks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.08573","snapshot_observed_at":"2026-08-08T15:35:36.060493Z","title":"Benchmarking the robustness of image watermarks","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.060493Z"},"links":{"cited_paper":"/paper/2401.08573","citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:7ab9a5e79cf1a003cbb9ddbba8e406e02454d7a99bab6a1be35953ae0eb04c52","observation_id":"89b1a2f9-7b3b-4bbb-ae00-47646489b496","resolution":{"observed_at":"2026-08-08T15:35:36.060493Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T15:35:36.948480Z","title":"Lsb based digital image watermarking for gray scale image","venue":null,"work_id":"21b1b852-8cdf-4a8b-9935-050e64f6165f","year":2012},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.065444Z"},"links":{"citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:eb71107129f3da2227e5760415a5d1dc20d300d92f0b034ee9888deed322ef3a","observation_id":"3422e1aa-e33b-448a-9f0c-7a03179aef70","resolution":{"observed_at":"2026-08-08T15:35:36.953186Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T15:35:36.933698Z","title":null,"venue":null,"work_id":"1ae8eeb2-d8e8-4a8f-b092-27a1b2c3365d","year":2024},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.070456Z"},"links":{"citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:85e62147d5b635268b1139c855198d891b33fe813718aa91a5f860d087d2dc7f","observation_id":"ad54b1f4-ef1c-4832-b3fc-5c9b8a289919","resolution":{"observed_at":"2026-08-08T15:35:36.938650Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T15:35:36.918888Z","title":"PIMoG : An Effective Screen-shooting Noise-Layer Simulation for Deep-Learning-Based Watermarking Network","venue":null,"work_id":"ea0d852e-f7d3-4627-ab55-48ef7c47fe03","year":2022},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.074664Z"},"links":{"citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:8ddb7ab5a2bd830c3f71f0cb01f3e4cf085ce230d7b148c987b7f3705838d177","observation_id":"2c69b05f-b6b6-4680-8cb8-bc65fbdc8915","resolution":{"observed_at":"2026-08-08T15:35:36.923856Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T15:35:36.079000Z","title":"Denoising diffusion probabilistic models","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.079000Z"},"links":{"citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:c1e95e938e0a353d1fa138fe746704735231c0d3ef960efe17cb101dbc3d7bb2","observation_id":"a4220526-3dc4-4ff7-96c1-e71b2bb07a59","resolution":{"observed_at":"2026-08-08T15:35:36.079000Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.15365","last_updated":"2025-02-19T03:50:04Z","snapshot_observed_at":"2026-07-06T17:49:07.589781Z","submitted_at":"2024-03-22T17:33:11Z","title":"A Transfer Attack to Image Watermarks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.15365","snapshot_observed_at":"2026-08-08T15:35:36.083343Z","title":"A transfer attack to image watermarks","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.083343Z"},"links":{"cited_paper":"/paper/2403.15365","citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:4f301cea82c407b284a06d05e9b2b35dcaa4f4c925920d1a2e0a2aa5728df6e5","observation_id":"1350d812-6500-4186-ade2-7e5699586532","resolution":{"observed_at":"2026-08-08T15:35:36.083343Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T15:35:36.894543Z","title":null,"venue":null,"work_id":"b35e6a0a-4133-4155-b63a-79ffa1c43364","year":2017},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.088174Z"},"links":{"citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:0a7a3dad57bb965663d3ae2d08a5ea06c8e57c9eae41c44850b350f8197296df","observation_id":"f6569a48-ce03-4526-b1b9-8e5258ce4579","resolution":{"observed_at":"2026-08-08T15:35:36.899098Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T15:35:36.880422Z","title":null,"venue":null,"work_id":"f7186829-22d3-4278-bb8d-cc84984fd46a","year":2023},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.092676Z"},"links":{"citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:fac18707b7b1b1735571a59a3f5ecccbb96204e2a4559a03452a6b20b3503ed0","observation_id":"061f1ad0-3926-4f20-8139-8b79ab2adc25","resolution":{"observed_at":"2026-08-08T15:35:36.884859Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T15:35:36.096899Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.096899Z"},"links":{"citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:1318912ec8b229c11d9d7bede06f15d0d9bed003e3b56c5f3154995e1ad93d36","observation_id":"f5fa9d88-8c82-4d09-8664-ed91f7cc1302","resolution":{"observed_at":"2026-08-08T15:35:36.096899Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.08363","last_updated":"2024-11-22T17:56:26Z","snapshot_observed_at":"2026-07-06T18:13:59.779068Z","submitted_at":"2024-05-14T07:05:18Z","title":"UnMarker: A Universal Attack on Defensive Image Watermarking","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.08363","snapshot_observed_at":"2026-08-08T15:35:36.101173Z","title":"and Hengartner, U","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.101173Z"},"links":{"cited_paper":"/paper/2405.08363","citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:eac0f428c84b5427d1851e8439f3018fcc245122d95593238e8f1b7fde45f818","observation_id":"684fab97-5436-4dca-b749-5fa41940b8a9","resolution":{"observed_at":"2026-08-08T15:35:36.101173Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T15:35:36.866398Z","title":null,"venue":null,"work_id":"7d60480e-881a-4f41-b744-ab7b18bdc8f2","year":2024},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.105854Z"},"links":{"citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:743d2737c2b8a9a603e1ebff49201cd3cafdf92f9103978de883be220804d043","observation_id":"91563b53-13af-402a-b64d-f51826f48920","resolution":{"observed_at":"2026-08-08T15:35:36.870878Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T15:35:36.852031Z","title":"V., and Herrigel, A","venue":null,"work_id":"6874af3f-536f-428e-8c23-bf88d2a143fe","year":2000},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.110082Z"},"links":{"citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:1d046d2b82b2f9da5842fdf4357304d86f3c4e93e156a097d59f6ec8027a3e38","observation_id":"13ebcc12-d07b-45cf-a850-406671f25718","resolution":{"observed_at":"2026-08-08T15:35:36.856497Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T15:35:36.114178Z","title":null,"venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.114178Z"},"links":{"citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:1d9c1d6a2720f3792b8cd2c7d937bc73d46427fd8349719a5ba956e724ebc52e","observation_id":"a5acee96-e8dc-4aeb-b54a-4c37cde2fe7b","resolution":{"observed_at":"2026-08-08T15:35:36.114178Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T15:35:36.118470Z","title":"A novel two-stage separable deep learning framework for practical blind watermarking","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.118470Z"},"links":{"citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:b5681da6f8ffb40addb9f2e33649da4534401f00d5373663d0ad280744787d48","observation_id":"471cb493-da70-4905-8ef6-ee7968e88185","resolution":{"observed_at":"2026-08-08T15:35:36.118470Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1711.05101","last_updated":"2019-01-04T21:01:49Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2017-11-14T14:24:06Z","title":"Decoupled Weight Decay Regularization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1711.05101","snapshot_observed_at":"2026-08-08T15:35:36.122737Z","title":"Decoupled weight decay regularization","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.122737Z"},"links":{"cited_paper":"/paper/1711.05101","citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:1cba2bbc4bad3c3d568b3dbcf366a3097aaf99078379d3f72131b4b584cb2590","observation_id":"f6e385b6-d0d8-4a9f-bc16-51fe21f8617c","resolution":{"observed_at":"2026-08-08T15:35:36.122737Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T15:35:36.826723Z","title":"Leveraging optimization for adaptive attacks on image watermarks","venue":null,"work_id":"c71fc24e-c373-47c2-9d6e-3c3982670b9b","year":2024},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.127568Z"},"links":{"citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:22a4d97628c4cfcadeba38ecacc8b1f3082f636fbce8e8c75dee7857d08363c5","observation_id":"3873903f-9c3d-45b0-94f0-9085b4a066e3","resolution":{"observed_at":"2026-08-08T15:35:36.831895Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T15:35:36.131918Z","title":"Towards Blind Watermarking : Combining Invertible and Non-invertible Mechanisms","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.131918Z"},"links":{"citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:a24d8517f7189972378fb538419b866b4666b6b2951771620c625fe6a8e05b59","observation_id":"9e261998-a708-4c2b-aad7-0929e60df3c6","resolution":{"observed_at":"2026-08-08T15:35:36.131918Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T15:35:36.812228Z","title":"Towards deep learning models resistant to adversarial attacks","venue":null,"work_id":"aa1c1e0b-5d5c-4529-b000-67ff2312abde","year":2017},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.136306Z"},"links":{"citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:3ee1ca6a76e8b8dde1df97267c2730937ebf10290ec084b06e337d4feee70f21","observation_id":"1f99ec8a-3624-4aeb-ab5e-cb048022c9b4","resolution":{"observed_at":"2026-08-08T15:35:36.816629Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T15:35:36.798357Z","title":"A., Ajay, M","venue":null,"work_id":"ac9df5b9-61fa-484a-9af2-a2189e9ffb89","year":2008},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.140658Z"},"links":{"citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:4e0df79d3ee259ee015cdba62691d7ae8309a3668351b6d5930b1579d79faa32","observation_id":"c5a138b0-6c3f-495b-83ba-3f97979efdce","resolution":{"observed_at":"2026-08-08T15:35:36.802624Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T15:35:36.783442Z","title":"Dalle3, 2024","venue":null,"work_id":"548ac2a0-89cf-41ca-91c7-b4d215bbe06f","year":2024},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.145052Z"},"links":{"citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:6e55dea68bb2089485ce458e742eeac701de082f84c1cf371592cddee553e5c4","observation_id":"f9228a98-0ca1-4ded-8aaf-ca5ac4a5366d","resolution":{"observed_at":"2026-08-08T15:35:36.787944Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.00076","last_updated":"2024-02-14T07:39:54Z","snapshot_observed_at":"2026-08-03T19:56:24.179712Z","submitted_at":"2023-09-29T18:30:29Z","title":"Robustness of AI-Image Detectors: Fundamental Limits and Practical Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.00076","snapshot_observed_at":"2026-08-08T15:35:36.149306Z","title":"S., Rezaei, K., Kumar, A., Chegini, A., Wang, W., and Feizi, S","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.149306Z"},"links":{"cited_paper":"/paper/2310.00076","citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:6759a40e8f2b259999871617f43c0760ddc378c99cbfd1e62a077e7150b4e4de","observation_id":"2df4df55-a91c-4697-a12a-771534c5dfbb","resolution":{"observed_at":"2026-08-08T15:35:36.149306Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T15:35:36.768792Z","title":"Stegastamp: Invisible hyperlinks in physical photographs","venue":null,"work_id":"953a5d9c-60f3-4345-8aa6-1f91868324c9","year":2020},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.153743Z"},"links":{"citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:c1a2e764f9b7e50b0db9ee9ef22766b546b2bc12698236c00716acbb4741cd8d","observation_id":"dcb9aefe-67b7-4011-8a32-57b5c2c65993","resolution":{"observed_at":"2026-08-08T15:35:36.773467Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T15:35:36.753937Z","title":"and buley","venue":null,"work_id":"8676afde-220f-44a5-8c6c-584b9371aa92","year":2020},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.157577Z"},"links":{"citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:11ea058c53eb5895d4bb9ee767b4663aa261f7e9bf4e84a212d6e312dc8568f5","observation_id":"a3350780-4443-4b57-a83e-d4ec2efca53e","resolution":{"observed_at":"2026-08-08T15:35:36.758887Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T15:35:36.162908Z","title":"C., Sheikh, H","venue":null,"work_id":null,"year":2004},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.162908Z"},"links":{"citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:4950a7d26d10db94fc18528202617799aeda62034cbb1bb58e414bd870e04137","observation_id":"165b799d-6895-46e4-a887-23e1b0bb563b","resolution":{"observed_at":"2026-08-08T15:35:36.162908Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.20030","last_updated":"2023-07-04T03:52:06Z","snapshot_observed_at":"2026-08-04T13:34:47.513256Z","submitted_at":"2023-05-31T17:00:31Z","title":"Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.20030","snapshot_observed_at":"2026-08-08T15:35:36.166834Z","title":"Tree-ring watermarks: Fingerprints for diffusion images that are invisible and robust","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.166834Z"},"links":{"cited_paper":"/paper/2305.20030","citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:5cacb91ff3a3759e02a2d7b387ead1a8833c4076b44f36a793bdcfb012e9c08f","observation_id":"a557f1b6-10ac-4134-8436-f4f44cab69c2","resolution":{"observed_at":"2026-08-08T15:35:36.166834Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.09026","last_updated":"2024-06-13T12:01:28Z","snapshot_observed_at":"2026-08-04T01:22:09.464337Z","submitted_at":"2024-06-13T12:01:28Z","title":"Steganalysis on Digital Watermarking: Is Your Defense Truly Impervious?","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.09026","snapshot_observed_at":"2026-08-08T15:35:36.170950Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.170950Z"},"links":{"cited_paper":"/paper/2406.09026","citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:99615c8b2540a2824eda5b4000905251e6fd9363d197320c900edb4dcc8b3335","observation_id":"8192f9df-269a-40da-a3ad-f679d973c5ea","resolution":{"observed_at":"2026-08-08T15:35:36.170950Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T15:35:36.175267Z","title":"Artificial Fingerprinting for Generative Models : Rooting Deepfake Attribution in Training Data","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.175267Z"},"links":{"citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:68978f7a73220c200339f21ab0e4dc2aa360286abbea6959c9c7dd179b2f0e70","observation_id":"3fb25af9-30fb-47d4-bc70-e067f079b9f9","resolution":{"observed_at":"2026-08-08T15:35:36.175267Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T15:35:36.730160Z","title":"S., and Fritz, M","venue":null,"work_id":"9d78dbee-3d0a-4b98-a037-d11aaf77bc5a","year":2021},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.179299Z"},"links":{"citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:176e0d6c59a6d431af6e57b56612403499346324e2efd0f006cbcd4766d519c8","observation_id":"21e5825e-d3d9-41a7-8288-9ceca2acc5fc","resolution":{"observed_at":"2026-08-08T15:35:36.734908Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1909.01285","last_updated":"2019-09-03T16:28:40Z","snapshot_observed_at":"2026-08-04T19:48:41.972949Z","submitted_at":"2019-09-03T16:28:40Z","title":"Robust Invisible Video Watermarking with Attention","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1909.01285","snapshot_observed_at":"2026-08-08T15:35:36.183608Z","title":"A., Xu, L., Cuesta-Infante, A., and Veeramachaneni, K","venue":null,"work_id":null,"year":1909},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.183608Z"},"links":{"cited_paper":"/paper/1909.01285","citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:9477136a15d5bdde70a9e07bb435eedcb5a6c84419c0788c396d9f6242c08813","observation_id":"45d3b5ec-90ff-4044-b01f-ea8785ee5df2","resolution":{"observed_at":"2026-08-08T15:35:36.183608Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.01953","last_updated":"2024-10-31T17:47:21Z","snapshot_observed_at":"2026-08-05T03:45:55.053236Z","submitted_at":"2023-06-02T23:29:28Z","title":"Invisible Image Watermarks Are Provably Removable Using Generative AI","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.01953","snapshot_observed_at":"2026-08-08T15:35:36.188118Z","title":"Invisible image watermarks are provably removable using generative ai","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.188118Z"},"links":{"cited_paper":"/paper/2306.01953","citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:42777f92cd3b099385daf4520f2099847d538260087a0db5aba4a101ae32220a","observation_id":"185fd3a0-158f-471e-82f2-5cdb6d5fcf00","resolution":{"observed_at":"2026-08-08T15:35:36.188118Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T15:35:36.712865Z","title":"Hidden: Hiding data with deep networks","venue":null,"work_id":"0f59c528-8573-44c0-88c6-fe4a902f9ea7","year":2018},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.192526Z"},"links":{"citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:afc01acc5ab8aa4c70f92f89ac7dd26bc3afa8b788bc8c5eacc58a8a24021efb","observation_id":"24f9748c-26c2-4946-b8b4-71d87891873a","resolution":{"observed_at":"2026-08-08T15:35:36.719264Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation"},"reference_resolution":{"displayed":36,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":22,"verified_exact":0,"verified_fuzzy":14},"total_outbound_references":36},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 36 of 36 outbound references and 1 inbound Pith citation observation for arXiv:2502.06418."}