{"as_of":"2026-08-16T12:38:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:7c55430c2ec221e31b3df71c62e9a5581f4fdcd4dd6cf8eae14c49257d364335","coverage":[{"denominator":48,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":48,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-15T18:20:49.663929Z","state":"measured"},{"denominator":50,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":50,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-16T06:30:59.297886+00:00","state":"measured"},{"denominator":2,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":2,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-03T19:52:11.018335Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-03T19:58:53.685679Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2507.18305","last_updated":"2025-07-24T11:24:35Z","snapshot_observed_at":"2026-08-15T18:13:00.950662Z","submitted_at":"2025-07-24T11:24:35Z","title":"BadReasoner: Planting Tunable Overthinking Backdoors into Large Reasoning Models for Fun or Profit","version":1},"cited_work":{"arxiv_id":"2507.18305","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2507.18305","snapshot_observed_at":"2026-07-03T19:58:53.685679Z","title":"Badreasoner: Planting tunable overthinking backdoors into large reasoning models for fun or profit,","venue":null,"work_id":"37641838-dbcd-4f4f-90b7-49412ccebfe4","year":2025},"citing_paper":{"arxiv_id":"2606.07968","last_updated":"2026-06-06T03:52:27Z","snapshot_observed_at":"2026-08-12T19:19:31.483970Z","submitted_at":"2026-06-06T03:52:27Z","title":"RecurGuard: Runtime Monitoring for Reasoning-Token Consumption Attacks","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-06-27T19:45:30.671490Z"},"links":{"cited_paper":"/paper/2507.18305","citing_paper":"/paper/2606.07968"},"observation_digest":"sha256:46bcf7e776f7f07eb9f7e9481f7257b8efc81280f04e1a34fb3241532d03cbe4","observation_id":"914bc9d2-f0b4-42a4-9b2b-cdca0ed4450c","resolution":{"observed_at":"2026-07-02T21:27:24.560289Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.18305","last_updated":"2025-07-24T11:24:35Z","snapshot_observed_at":"2026-08-15T18:13:00.950662Z","submitted_at":"2025-07-24T11:24:35Z","title":"BadReasoner: Planting Tunable Overthinking Backdoors into Large Reasoning Models for Fun or Profit","version":1},"cited_work":{"arxiv_id":"2507.18305","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2507.18305","snapshot_observed_at":"2026-07-03T19:58:53.685679Z","title":"Badreasoner: Planting tunable overthinking backdoors into large reasoning models for fun or profit,","venue":null,"work_id":"37641838-dbcd-4f4f-90b7-49412ccebfe4","year":2025},"citing_paper":{"arxiv_id":"2607.01518","last_updated":"2026-07-01T22:31:10Z","snapshot_observed_at":"2026-08-12T15:56:48.128553Z","submitted_at":"2026-07-01T22:31:10Z","title":"Overthink-Triggered Slowdown Attacks on LVLM-Based Robotic Systems","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-07-03T19:52:11.018335Z"},"links":{"cited_paper":"/paper/2507.18305","citing_paper":"/paper/2607.01518"},"observation_digest":"sha256:a09eae83e6eacd993fe4708ccb03e9c00471c5acc54763d3b997e944f0002835","observation_id":"c03f65bb-bcf6-43be-adef-bf82afa81112","resolution":{"observed_at":"2026-07-03T19:58:53.687109Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2507.18305/citation-record","integrity":"/paper/2507.18305/integrity","json":"/paper/2507.18305/citation-record.json","paper":"/paper/2507.18305"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T18:20:50.538138Z","title":"Stealthy and persistent unalignment on large language models via backdoor injections","venue":null,"work_id":"f35fc3d1-0afa-4866-ac75-75c7a7a30c7e","year":2024},"citing_paper":{"arxiv_id":"2507.18305","last_updated":"2025-07-24T11:24:35Z","snapshot_observed_at":"2026-08-15T18:13:00.950662Z","submitted_at":"2025-07-24T11:24:35Z","title":"BadReasoner: Planting Tunable Overthinking Backdoors into Large Reasoning Models for Fun or Profit","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-15T18:20:49.423120Z"},"links":{"citing_paper":"/paper/2507.18305"},"observation_digest":"sha256:59ca7d4cda96b8533b776a94f9f1db829b11221f5aff0305c43e434dffd138fd","observation_id":"0e9db89c-04c3-4fca-84fd-ce7c031249f8","resolution":{"observed_at":"2026-08-15T18:20:50.542676Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.21187","last_updated":"2025-02-01T07:57:37Z","snapshot_observed_at":"2026-08-01T16:43:44.704797Z","submitted_at":"2024-12-30T18:55:12Z","title":"Do NOT Think That Much for 2+3=? On the Overthinking of o1-Like LLMs","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.21187","snapshot_observed_at":"2026-08-15T18:20:49.431194Z","title":"Do NOT think that much for 2+3=? on the overthinking of o1-like llms","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.18305","last_updated":"2025-07-24T11:24:35Z","snapshot_observed_at":"2026-08-15T18:13:00.950662Z","submitted_at":"2025-07-24T11:24:35Z","title":"BadReasoner: Planting Tunable Overthinking Backdoors into Large Reasoning Models for Fun or Profit","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-15T18:20:49.431194Z"},"links":{"cited_paper":"/paper/2412.21187","citing_paper":"/paper/2507.18305"},"observation_digest":"sha256:469041c1f8c4807fe3bd9e2b72b2a82a1eda235d81d380d5ba0a8470f6500b08","observation_id":"05476a2f-4644-4145-8486-8777fc9e4210","resolution":{"observed_at":"2026-08-15T18:20:49.431194Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2110.14168","last_updated":"2021-11-18T00:23:45Z","snapshot_observed_at":"2026-08-14T02:43:01.480086Z","submitted_at":"2021-10-27T04:49:45Z","title":"Training Verifiers to Solve Math Word Problems","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2110.14168","snapshot_observed_at":"2026-08-15T18:20:49.437459Z","title":"Training verifiers to solve math word problems","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2507.18305","last_updated":"2025-07-24T11:24:35Z","snapshot_observed_at":"2026-08-15T18:13:00.950662Z","submitted_at":"2025-07-24T11:24:35Z","title":"BadReasoner: Planting Tunable Overthinking Backdoors into Large Reasoning Models for Fun or Profit","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-15T18:20:49.437459Z"},"links":{"cited_paper":"/paper/2110.14168","citing_paper":"/paper/2507.18305"},"observation_digest":"sha256:0ea5331ae7ee44f59b39c15bedd82d7d59a00beee50a654b12ed050a2c2ca67a","observation_id":"6a14410f-8e26-443e-9e39-321e2b9fc0a7","resolution":{"observed_at":"2026-08-15T18:20:49.437459Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.08235","last_updated":"2025-02-12T09:23:26Z","snapshot_observed_at":"2026-08-13T20:05:34.411750Z","submitted_at":"2025-02-12T09:23:26Z","title":"The Danger of Overthinking: Examining the Reasoning-Action Dilemma in Agentic Tasks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.08235","snapshot_observed_at":"2026-08-15T18:20:49.442782Z","title":"The danger of overthinking: Examining the reasoning-action dilemma in agentic tasks","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.18305","last_updated":"2025-07-24T11:24:35Z","snapshot_observed_at":"2026-08-15T18:13:00.950662Z","submitted_at":"2025-07-24T11:24:35Z","title":"BadReasoner: Planting Tunable Overthinking Backdoors into Large Reasoning Models for Fun or Profit","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-15T18:20:49.442782Z"},"links":{"cited_paper":"/paper/2502.08235","citing_paper":"/paper/2507.18305"},"observation_digest":"sha256:56ec982874ac44d331080679fc61209672e7c5ef1ca3b71ec68933f269ac42d5","observation_id":"bc8a09ea-4929-4fbb-b902-dc53d57c9605","resolution":{"observed_at":"2026-08-15T18:20:49.442782Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2501.12948","last_updated":"2026-01-04T03:57:36Z","snapshot_observed_at":"2026-08-15T12:33:55.451951Z","submitted_at":"2025-01-22T15:19:35Z","title":"DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.12948","snapshot_observed_at":"2026-08-15T18:20:49.447759Z","title":"Deepseek-r1: Incentivizing reasoning capability in llms via reinforcement learning","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.18305","last_updated":"2025-07-24T11:24:35Z","snapshot_observed_at":"2026-08-15T18:13:00.950662Z","submitted_at":"2025-07-24T11:24:35Z","title":"BadReasoner: Planting Tunable Overthinking Backdoors into Large Reasoning Models for Fun or Profit","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-15T18:20:49.447759Z"},"links":{"cited_paper":"/paper/2501.12948","citing_paper":"/paper/2507.18305"},"observation_digest":"sha256:89cb7a777ce2255bffcd84add13b52b7e6fd0b652a59be9fa56ead1a87f1cb8e","observation_id":"88a98d13-ff2a-4a13-b9ed-92d9cb10a856","resolution":{"observed_at":"2026-08-15T18:20:49.447759Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.19394","last_updated":"2025-02-13T03:00:18Z","snapshot_observed_at":"2026-08-11T00:36:04.251619Z","submitted_at":"2024-12-27T01:00:23Z","title":"An Engorgio Prompt Makes Large Language Model Babble on","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.19394","snapshot_observed_at":"2026-08-15T18:20:49.453101Z","title":"An engorgio prompt makes large language model babble on","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.18305","last_updated":"2025-07-24T11:24:35Z","snapshot_observed_at":"2026-08-15T18:13:00.950662Z","submitted_at":"2025-07-24T11:24:35Z","title":"BadReasoner: Planting Tunable Overthinking Backdoors into Large Reasoning Models for Fun or Profit","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-15T18:20:49.453101Z"},"links":{"cited_paper":"/paper/2412.19394","citing_paper":"/paper/2507.18305"},"observation_digest":"sha256:f5d8f36d7910e84aff8ceb5ed4db617bf0a2f7c84f8017a5f3c61adb58d8e0ee","observation_id":"cea1374a-4435-4553-b2a7-4e123213753f","resolution":{"observed_at":"2026-08-15T18:20:49.453101Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T18:20:50.523594Z","title":"Towards revealing the mystery behind chain of thought: A theoretical perspective","venue":null,"work_id":"b5e639ec-f26d-4a63-ba9e-76ec78e6b48f","year":2023},"citing_paper":{"arxiv_id":"2507.18305","last_updated":"2025-07-24T11:24:35Z","snapshot_observed_at":"2026-08-15T18:13:00.950662Z","submitted_at":"2025-07-24T11:24:35Z","title":"BadReasoner: Planting Tunable Overthinking Backdoors into Large Reasoning Models for Fun or Profit","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-15T18:20:49.459317Z"},"links":{"citing_paper":"/paper/2507.18305"},"observation_digest":"sha256:e9a472bcd1e33b994bf3ef85dc2e0ab49b91c5dffc2a256ef0b1f2c63e2dae5b","observation_id":"2235fb81-823b-40a7-a1b5-5953287965aa","resolution":{"observed_at":"2026-08-15T18:20:50.528869Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.10760","last_updated":"2024-10-14T17:39:31Z","snapshot_observed_at":"2026-08-12T22:23:29.770575Z","submitted_at":"2024-10-14T17:39:31Z","title":"Denial-of-Service Poisoning Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.10760","snapshot_observed_at":"2026-08-15T18:20:49.463977Z","title":"Denial-of-service poisoning attacks against large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.18305","last_updated":"2025-07-24T11:24:35Z","snapshot_observed_at":"2026-08-15T18:13:00.950662Z","submitted_at":"2025-07-24T11:24:35Z","title":"BadReasoner: Planting Tunable Overthinking Backdoors into Large Reasoning Models for Fun or Profit","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-15T18:20:49.463977Z"},"links":{"cited_paper":"/paper/2410.10760","citing_paper":"/paper/2507.18305"},"observation_digest":"sha256:221ccc7fd84637e18fe4322799a2ff8afb32f84641caf41c3b23e279e2a7ade6","observation_id":"c1e1610d-5587-4038-9dd7-70158ce52b39","resolution":{"observed_at":"2026-08-15T18:20:49.463977Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.14020","last_updated":"2024-02-21T18:59:13Z","snapshot_observed_at":"2026-08-15T18:10:45.452561Z","submitted_at":"2024-02-21T18:59:13Z","title":"Coercing LLMs to do and reveal (almost) anything","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.14020","snapshot_observed_at":"2026-08-15T18:20:49.469492Z","title":"Coercing llms to do and reveal (almost) anything","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.18305","last_updated":"2025-07-24T11:24:35Z","snapshot_observed_at":"2026-08-15T18:13:00.950662Z","submitted_at":"2025-07-24T11:24:35Z","title":"BadReasoner: Planting Tunable Overthinking Backdoors into Large Reasoning Models for Fun or Profit","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-15T18:20:49.469492Z"},"links":{"cited_paper":"/paper/2402.14020","citing_paper":"/paper/2507.18305"},"observation_digest":"sha256:5edcbf6f676d0624ae5d846ffa1a022a6aead8a1968d85917aaa94af393b0b05","observation_id":"850ee62a-b512-42e6-adc0-e3c89b2f3dff","resolution":{"observed_at":"2026-08-15T18:20:49.469492Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.02406","last_updated":"2024-04-03T02:16:53Z","snapshot_observed_at":"2026-08-14T12:23:45.393194Z","submitted_at":"2024-04-03T02:16:53Z","title":"Exploring Backdoor Vulnerabilities of Chat Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.02406","snapshot_observed_at":"2026-08-15T18:20:49.474056Z","title":"Exploring backdoor vulnerabilities of chat models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.18305","last_updated":"2025-07-24T11:24:35Z","snapshot_observed_at":"2026-08-15T18:13:00.950662Z","submitted_at":"2025-07-24T11:24:35Z","title":"BadReasoner: Planting Tunable Overthinking Backdoors into Large Reasoning Models for Fun or Profit","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-15T18:20:49.474056Z"},"links":{"cited_paper":"/paper/2404.02406","citing_paper":"/paper/2507.18305"},"observation_digest":"sha256:f85560e4c337e33071643f80b91611ce9b07312faafe12868dec95934c4fee21","observation_id":"71332089-ec13-4514-8671-cbafae29be19","resolution":{"observed_at":"2026-08-15T18:20:49.474056Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.16720","last_updated":"2026-04-30T02:46:40Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-12-21T18:04:31Z","title":"OpenAI o1 System Card","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.16720","snapshot_observed_at":"2026-08-15T18:20:49.479378Z","title":"Openai o1 system card","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.18305","last_updated":"2025-07-24T11:24:35Z","snapshot_observed_at":"2026-08-15T18:13:00.950662Z","submitted_at":"2025-07-24T11:24:35Z","title":"BadReasoner: Planting Tunable Overthinking Backdoors into Large Reasoning Models for Fun or Profit","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-15T18:20:49.479378Z"},"links":{"cited_paper":"/paper/2412.16720","citing_paper":"/paper/2507.18305"},"observation_digest":"sha256:0631d6458ee3f1b8c3adf07a2865b6462c04624bd9e3ca04c67e23a3573bee2a","observation_id":"29a178d2-4c44-4ab4-9d9a-14e37bc5287e","resolution":{"observed_at":"2026-08-15T18:20:49.479378Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T18:20:49.485425Z","title":"Overthink: Slowdown attacks on reasoning llms","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.18305","last_updated":"2025-07-24T11:24:35Z","snapshot_observed_at":"2026-08-15T18:13:00.950662Z","submitted_at":"2025-07-24T11:24:35Z","title":"BadReasoner: Planting Tunable Overthinking Backdoors into Large Reasoning Models for Fun or Profit","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-15T18:20:49.485425Z"},"links":{"citing_paper":"/paper/2507.18305"},"observation_digest":"sha256:811251b7d35115de15b495ea7e3c6ddbca9b08a1fa02b54aa4f7d55f89ec47e9","observation_id":"b5bf3fd7-1785-4157-aefc-552a07118c2d","resolution":{"observed_at":"2026-08-15T18:20:49.485425Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T18:20:50.510025Z","title":"Weight poisoning attacks on pretrained models","venue":null,"work_id":"a07b9ca6-523a-4984-b152-35039096fdbd","year":2020},"citing_paper":{"arxiv_id":"2507.18305","last_updated":"2025-07-24T11:24:35Z","snapshot_observed_at":"2026-08-15T18:13:00.950662Z","submitted_at":"2025-07-24T11:24:35Z","title":"BadReasoner: Planting Tunable Overthinking Backdoors into Large Reasoning Models for Fun or Profit","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-15T18:20:49.490150Z"},"links":{"citing_paper":"/paper/2507.18305"},"observation_digest":"sha256:71c42e3b8185d6e7db35c1be308c4268721a73f6235f416977a918e8291968f2","observation_id":"de4f0b73-234c-4d4f-9d23-eb456cb562a6","resolution":{"observed_at":"2026-08-15T18:20:50.514430Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.12798","last_updated":"2025-05-19T04:34:50Z","snapshot_observed_at":"2026-08-12T22:58:55.229964Z","submitted_at":"2024-08-23T02:21:21Z","title":"BackdoorLLM: A Comprehensive Benchmark for Backdoor Attacks and Defenses on Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.12798","snapshot_observed_at":"2026-08-15T18:20:49.495320Z","title":"Backdoorllm: A comprehensive benchmark for backdoor attacks on large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.18305","last_updated":"2025-07-24T11:24:35Z","snapshot_observed_at":"2026-08-15T18:13:00.950662Z","submitted_at":"2025-07-24T11:24:35Z","title":"BadReasoner: Planting Tunable Overthinking Backdoors into Large Reasoning Models for Fun or Profit","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-15T18:20:49.495320Z"},"links":{"cited_paper":"/paper/2408.12798","citing_paper":"/paper/2507.18305"},"observation_digest":"sha256:b15c318f5d17fb031c7bd1b5a197cb33e4b74db1ea92125806c2abd64fcf3900","observation_id":"6d85ab41-edc1-4926-aad2-adf69e31d024","resolution":{"observed_at":"2026-08-15T18:20:49.495320Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T18:20:50.496359Z","title":"Backdoor learning: A survey","venue":null,"work_id":"4ca782e9-3329-4daa-8b3d-d23b99862f85","year":2022},"citing_paper":{"arxiv_id":"2507.18305","last_updated":"2025-07-24T11:24:35Z","snapshot_observed_at":"2026-08-15T18:13:00.950662Z","submitted_at":"2025-07-24T11:24:35Z","title":"BadReasoner: Planting Tunable Overthinking Backdoors into Large Reasoning Models for Fun or Profit","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-15T18:20:49.500149Z"},"links":{"citing_paper":"/paper/2507.18305"},"observation_digest":"sha256:30255a5d49fc9d3d3d86b4874e018b9eaef1ed749d8665d96be5de65dba38076","observation_id":"9deca424-1994-4363-829d-107b2ae1d246","resolution":{"observed_at":"2026-08-15T18:20:50.500821Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T18:20:50.482610Z","title":"Let's verify step by step","venue":null,"work_id":"d3ec2323-ebb3-4f66-86bc-24d9f4e40401","year":2023},"citing_paper":{"arxiv_id":"2507.18305","last_updated":"2025-07-24T11:24:35Z","snapshot_observed_at":"2026-08-15T18:13:00.950662Z","submitted_at":"2025-07-24T11:24:35Z","title":"BadReasoner: Planting Tunable Overthinking Backdoors into Large Reasoning Models for Fun or Profit","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-15T18:20:49.505494Z"},"links":{"citing_paper":"/paper/2507.18305"},"observation_digest":"sha256:eca1d63137f1c0676c4b871c5dd6ad38fb0925a792f50be234cd5d38bfe82648","observation_id":"83df5e0f-cd74-48b4-8c20-d1a3fe2cf019","resolution":{"observed_at":"2026-08-15T18:20:50.487332Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T18:20:50.468313Z","title":"Fine-pruning: Defending against backdooring attacks on deep neural networks","venue":null,"work_id":"9e8ed918-9370-4b4a-8cd3-71b3126cb7ad","year":2018},"citing_paper":{"arxiv_id":"2507.18305","last_updated":"2025-07-24T11:24:35Z","snapshot_observed_at":"2026-08-15T18:13:00.950662Z","submitted_at":"2025-07-24T11:24:35Z","title":"BadReasoner: Planting Tunable Overthinking Backdoors into Large Reasoning Models for Fun or Profit","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-15T18:20:49.510294Z"},"links":{"citing_paper":"/paper/2507.18305"},"observation_digest":"sha256:ffd6aa08291472c9d9b804f7249ffd757442090dde35c90f86f34362aac0999a","observation_id":"ffbb9464-34be-4c31-8aa4-85017f8dd4a9","resolution":{"observed_at":"2026-08-15T18:20:50.473134Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T18:20:50.453955Z","title":"Trojtext: Test-time invisible textual trojan insertion","venue":null,"work_id":"3aea539f-e54c-459a-ae30-fc43cd54e6b4","year":2023},"citing_paper":{"arxiv_id":"2507.18305","last_updated":"2025-07-24T11:24:35Z","snapshot_observed_at":"2026-08-15T18:13:00.950662Z","submitted_at":"2025-07-24T11:24:35Z","title":"BadReasoner: Planting Tunable Overthinking Backdoors into Large Reasoning Models for Fun or Profit","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-15T18:20:49.515544Z"},"links":{"citing_paper":"/paper/2507.18305"},"observation_digest":"sha256:31e45e8a9d83e9fb742a6edbd219479508af4caf6a6e027d48543d940914a98d","observation_id":"596ab527-3771-40e3-9f56-550348c959b8","resolution":{"observed_at":"2026-08-15T18:20:50.458671Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T18:20:50.439463Z","title":"Hidden trigger backdoor attack on NLP models via linguistic style manipulation","venue":null,"work_id":"3918380b-e923-4624-94af-1fba75606b46","year":2022},"citing_paper":{"arxiv_id":"2507.18305","last_updated":"2025-07-24T11:24:35Z","snapshot_observed_at":"2026-08-15T18:13:00.950662Z","submitted_at":"2025-07-24T11:24:35Z","title":"BadReasoner: Planting Tunable Overthinking Backdoors into Large Reasoning Models for Fun or Profit","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-15T18:20:49.521367Z"},"links":{"citing_paper":"/paper/2507.18305"},"observation_digest":"sha256:4fb59536e6c1c0e960bdbce2f43e814105e57a50e2ff0c7e8c330cfca4dc6386","observation_id":"3a302ec1-bfc6-461d-b731-a2d9a1f29fec","resolution":{"observed_at":"2026-08-15T18:20:50.443856Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T18:20:50.425466Z","title":"Mind the style of text! adversarial and backdoor attacks based on text style transfer","venue":null,"work_id":"be94a65d-cc1c-4dae-ba44-a2002ab80287","year":2021},"citing_paper":{"arxiv_id":"2507.18305","last_updated":"2025-07-24T11:24:35Z","snapshot_observed_at":"2026-08-15T18:13:00.950662Z","submitted_at":"2025-07-24T11:24:35Z","title":"BadReasoner: Planting Tunable Overthinking Backdoors into Large Reasoning Models for Fun or Profit","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-15T18:20:49.527177Z"},"links":{"citing_paper":"/paper/2507.18305"},"observation_digest":"sha256:97ff1a593bfe93acdd6d470c6110baf78034bda189fa94d88b7d63ce0a6fba43","observation_id":"19f36903-bca8-4b29-86ba-9ddc63c9d3ac","resolution":{"observed_at":"2026-08-15T18:20:50.429979Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T18:20:50.411124Z","title":"Hidden killer: Invisible textual backdoor attacks with syntactic trigger","venue":null,"work_id":"34a82208-a892-485a-923d-8198d883eb3d","year":2021},"citing_paper":{"arxiv_id":"2507.18305","last_updated":"2025-07-24T11:24:35Z","snapshot_observed_at":"2026-08-15T18:13:00.950662Z","submitted_at":"2025-07-24T11:24:35Z","title":"BadReasoner: Planting Tunable Overthinking Backdoors into Large Reasoning Models for Fun or Profit","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-15T18:20:49.532014Z"},"links":{"citing_paper":"/paper/2507.18305"},"observation_digest":"sha256:0c4b32b9b1df983fb098753589d074b81f1e6aff29ac9b7d8abda349472e4d17","observation_id":"b83080ef-a1b3-461d-9355-93ad4d46edc4","resolution":{"observed_at":"2026-08-15T18:20:50.415606Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T18:20:50.395673Z","title":"Fine-tuning aligned language models compromises safety, even when users do not intend to! In ICLR, 2024","venue":null,"work_id":"e9650613-09ae-4e7f-bf72-37d573c82360","year":2024},"citing_paper":{"arxiv_id":"2507.18305","last_updated":"2025-07-24T11:24:35Z","snapshot_observed_at":"2026-08-15T18:13:00.950662Z","submitted_at":"2025-07-24T11:24:35Z","title":"BadReasoner: Planting Tunable Overthinking Backdoors into Large Reasoning Models for Fun or Profit","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-15T18:20:49.536661Z"},"links":{"citing_paper":"/paper/2507.18305"},"observation_digest":"sha256:f1c75998f2784770b526c2b9f2733eb38307e01329e5d84625bc4bf02dd5aee4","observation_id":"5fceee3e-6d24-40a9-af70-36ea43b310dd","resolution":{"observed_at":"2026-08-15T18:20:50.401404Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T18:20:50.380774Z","title":"Hello qwen2","venue":null,"work_id":"83896449-9861-4a3d-b1a5-41cf3ef985dd","year":2024},"citing_paper":{"arxiv_id":"2507.18305","last_updated":"2025-07-24T11:24:35Z","snapshot_observed_at":"2026-08-15T18:13:00.950662Z","submitted_at":"2025-07-24T11:24:35Z","title":"BadReasoner: Planting Tunable Overthinking Backdoors into Large Reasoning Models for Fun or Profit","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-15T18:20:49.540840Z"},"links":{"citing_paper":"/paper/2507.18305"},"observation_digest":"sha256:bfab02765071d9493b10173c213eae5091a4fd3112bda8553a65fa2634bbb462","observation_id":"9e988b3f-8c7f-42ce-a4a2-6187d0df488f","resolution":{"observed_at":"2026-08-15T18:20:50.385345Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T18:20:50.366859Z","title":"Qwq-32b: Embracing the power of reinforcement learning","venue":null,"work_id":"43b68161-8990-40ab-965d-cc2d7fc580a6","year":2025},"citing_paper":{"arxiv_id":"2507.18305","last_updated":"2025-07-24T11:24:35Z","snapshot_observed_at":"2026-08-15T18:13:00.950662Z","submitted_at":"2025-07-24T11:24:35Z","title":"BadReasoner: Planting Tunable Overthinking Backdoors into Large Reasoning Models for Fun or Profit","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-15T18:20:49.545878Z"},"links":{"citing_paper":"/paper/2507.18305"},"observation_digest":"sha256:561373d0493e1889511bf55ff300770a2c00948a739aa865d4510a0eed5a05c4","observation_id":"6261e850-aea0-4bc2-bf6a-d00574ed861f","resolution":{"observed_at":"2026-08-15T18:20:50.371514Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T18:20:50.352627Z","title":"Universal jailbreak backdoors from poisoned human feedback","venue":null,"work_id":"12458407-22d2-4690-a36b-ea6a71d2bafb","year":2024},"citing_paper":{"arxiv_id":"2507.18305","last_updated":"2025-07-24T11:24:35Z","snapshot_observed_at":"2026-08-15T18:13:00.950662Z","submitted_at":"2025-07-24T11:24:35Z","title":"BadReasoner: Planting Tunable Overthinking Backdoors into Large Reasoning Models for Fun or Profit","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-15T18:20:49.550611Z"},"links":{"citing_paper":"/paper/2507.18305"},"observation_digest":"sha256:ca43216a5f5fbb3642f6b37d3480d8efd7689f9853e279612737888dd69bee2b","observation_id":"e739cdbc-4858-4626-9d23-3e8d9fc18233","resolution":{"observed_at":"2026-08-15T18:20:50.357322Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T18:20:50.338807Z","title":"On the exploitability of instruction tuning","venue":null,"work_id":"6f71502a-c8d4-4d75-9a35-a9ee0494b85f","year":2023},"citing_paper":{"arxiv_id":"2507.18305","last_updated":"2025-07-24T11:24:35Z","snapshot_observed_at":"2026-08-15T18:13:00.950662Z","submitted_at":"2025-07-24T11:24:35Z","title":"BadReasoner: Planting Tunable Overthinking Backdoors into Large Reasoning Models for Fun or Profit","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-15T18:20:49.555721Z"},"links":{"citing_paper":"/paper/2507.18305"},"observation_digest":"sha256:42aa9737527e1de66a9aff245fa3b6791b9ca68794fc6644c0a5b22d5ff5b794","observation_id":"436d4c44-e35d-4e1e-903f-231f42b98d67","resolution":{"observed_at":"2026-08-15T18:20:50.343158Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T18:20:50.324239Z","title":"Sponge examples: Energy-latency attacks on neural networks","venue":null,"work_id":"f9cef280-46a3-4e37-8f21-736b1e4e00df","year":2021},"citing_paper":{"arxiv_id":"2507.18305","last_updated":"2025-07-24T11:24:35Z","snapshot_observed_at":"2026-08-15T18:13:00.950662Z","submitted_at":"2025-07-24T11:24:35Z","title":"BadReasoner: Planting Tunable Overthinking Backdoors into Large Reasoning Models for Fun or Profit","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-15T18:20:49.560647Z"},"links":{"citing_paper":"/paper/2507.18305"},"observation_digest":"sha256:a7c3efefbd7de172455a8a552f274c265aab2edbd1107e554f42f36a29787038","observation_id":"eb149dfb-2d8c-4568-a9a3-65ed1dcfc025","resolution":{"observed_at":"2026-08-15T18:20:50.328871Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T18:20:49.565294Z","title":"Qwq: Reflect deeply on the boundaries of the unknown, November 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.18305","last_updated":"2025-07-24T11:24:35Z","snapshot_observed_at":"2026-08-15T18:13:00.950662Z","submitted_at":"2025-07-24T11:24:35Z","title":"BadReasoner: Planting Tunable Overthinking Backdoors into Large Reasoning Models for Fun or Profit","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-15T18:20:49.565294Z"},"links":{"citing_paper":"/paper/2507.18305"},"observation_digest":"sha256:221f177feacca8a47e3c2d59b3cf2b646ea454942f4e17104d098168f31db976","observation_id":"6b88ae2f-777b-4a88-8113-3dcdfde3e529","resolution":{"observed_at":"2026-08-15T18:20:49.565294Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T18:20:50.300636Z","title":"Poisoning language models during instruction tuning","venue":null,"work_id":"dd50a4f6-0bbd-4aef-a5bf-e1a4e3dcc88a","year":2023},"citing_paper":{"arxiv_id":"2507.18305","last_updated":"2025-07-24T11:24:35Z","snapshot_observed_at":"2026-08-15T18:13:00.950662Z","submitted_at":"2025-07-24T11:24:35Z","title":"BadReasoner: Planting Tunable Overthinking Backdoors into Large Reasoning Models for Fun or Profit","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-15T18:20:49.569710Z"},"links":{"citing_paper":"/paper/2507.18305"},"observation_digest":"sha256:f57a4ec140d4daca437d723986def8934f950b0c9161aad8a30d34bb6bd87286","observation_id":"cae08903-eb78-4bf4-bd90-224d2f779b22","resolution":{"observed_at":"2026-08-15T18:20:50.305793Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2109.01652","last_updated":"2022-02-08T20:26:45Z","snapshot_observed_at":"2026-08-14T06:11:14.515796Z","submitted_at":"2021-09-03T17:55:52Z","title":"Finetuned Language Models Are Zero-Shot Learners","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2109.01652","snapshot_observed_at":"2026-08-15T18:20:49.574216Z","title":"Finetuned language models are zero-shot learners","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2507.18305","last_updated":"2025-07-24T11:24:35Z","snapshot_observed_at":"2026-08-15T18:13:00.950662Z","submitted_at":"2025-07-24T11:24:35Z","title":"BadReasoner: Planting Tunable Overthinking Backdoors into Large Reasoning Models for Fun or Profit","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-15T18:20:49.574216Z"},"links":{"cited_paper":"/paper/2109.01652","citing_paper":"/paper/2507.18305"},"observation_digest":"sha256:cd08a93bcb3de24213439e41ccff44f0fdb6ab5b92565c31b8f8fb3650a24ad3","observation_id":"21a37586-89b4-4b74-8fb5-c7cc82d90536","resolution":{"observed_at":"2026-08-15T18:20:49.574216Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T18:20:50.286415Z","title":"Chain-of-thought prompting elicits reasoning in large language models","venue":null,"work_id":"30da12ec-4657-4d75-ad36-0b942e045794","year":2022},"citing_paper":{"arxiv_id":"2507.18305","last_updated":"2025-07-24T11:24:35Z","snapshot_observed_at":"2026-08-15T18:13:00.950662Z","submitted_at":"2025-07-24T11:24:35Z","title":"BadReasoner: Planting Tunable Overthinking Backdoors into Large Reasoning Models for Fun or Profit","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-15T18:20:49.579105Z"},"links":{"citing_paper":"/paper/2507.18305"},"observation_digest":"sha256:3b8c5337a37052828aaad9e0555ac4f70354f3ffdc33372c57b5076698be7963","observation_id":"7072eb48-4fa2-42b6-bf16-4d25f12f84a6","resolution":{"observed_at":"2026-08-15T18:20:50.291205Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.12242","last_updated":"2024-01-20T04:53:35Z","snapshot_observed_at":"2026-08-13T04:38:47.155528Z","submitted_at":"2024-01-20T04:53:35Z","title":"BadChain: Backdoor Chain-of-Thought Prompting for Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.12242","snapshot_observed_at":"2026-08-15T18:20:49.583507Z","title":"Badchain: Backdoor chain-of-thought prompting for large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.18305","last_updated":"2025-07-24T11:24:35Z","snapshot_observed_at":"2026-08-15T18:13:00.950662Z","submitted_at":"2025-07-24T11:24:35Z","title":"BadReasoner: Planting Tunable Overthinking Backdoors into Large Reasoning Models for Fun or Profit","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-15T18:20:49.583507Z"},"links":{"cited_paper":"/paper/2401.12242","citing_paper":"/paper/2507.18305"},"observation_digest":"sha256:7bc0513971d0d1601e8766ea0f6a3eee5c6db95c075c90f0acf1d25e359a6417","observation_id":"7598b979-7287-4949-9f1d-b5c6051d8f66","resolution":{"observed_at":"2026-08-15T18:20:49.583507Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2501.09686","last_updated":"2025-01-23T08:44:44Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-01-16T17:37:58Z","title":"Towards Large Reasoning Models: A Survey of Reinforced Reasoning with Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.09686","snapshot_observed_at":"2026-08-15T18:20:49.588169Z","title":"Towards large reasoning models: A survey of reinforced reasoning with large language models","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.18305","last_updated":"2025-07-24T11:24:35Z","snapshot_observed_at":"2026-08-15T18:13:00.950662Z","submitted_at":"2025-07-24T11:24:35Z","title":"BadReasoner: Planting Tunable Overthinking Backdoors into Large Reasoning Models for Fun or Profit","version":1},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-15T18:20:49.588169Z"},"links":{"cited_paper":"/paper/2501.09686","citing_paper":"/paper/2507.18305"},"observation_digest":"sha256:38db72e372e0e9e77655d15415af445c62bc7e441205d9ff1fcb18ded6fed7ed","observation_id":"db743a0c-585f-473a-8abf-e34ec0f01146","resolution":{"observed_at":"2026-08-15T18:20:49.588169Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.18600","last_updated":"2025-03-03T17:08:21Z","snapshot_observed_at":"2026-08-07T17:49:06.764625Z","submitted_at":"2025-02-25T19:36:06Z","title":"Chain of Draft: Thinking Faster by Writing Less","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.18600","snapshot_observed_at":"2026-08-15T18:20:49.592495Z","title":"Chain of draft: Thinking faster by writing less","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.18305","last_updated":"2025-07-24T11:24:35Z","snapshot_observed_at":"2026-08-15T18:13:00.950662Z","submitted_at":"2025-07-24T11:24:35Z","title":"BadReasoner: Planting Tunable Overthinking Backdoors into Large Reasoning Models for Fun or Profit","version":1},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-15T18:20:49.592495Z"},"links":{"cited_paper":"/paper/2502.18600","citing_paper":"/paper/2507.18305"},"observation_digest":"sha256:3d8f4cac28cef194e62e836af6052423b6da603d778aefb7fb5f1a0daeec1b5b","observation_id":"ec9420a7-05cc-4cd9-8f40-da17212da17e","resolution":{"observed_at":"2026-08-15T18:20:49.592495Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T18:20:50.271373Z","title":"BITE: textual backdoor attacks with iterative trigger injection","venue":null,"work_id":"2d011ec3-f3eb-42f9-9516-fb5ad7feeec7","year":2023},"citing_paper":{"arxiv_id":"2507.18305","last_updated":"2025-07-24T11:24:35Z","snapshot_observed_at":"2026-08-15T18:13:00.950662Z","submitted_at":"2025-07-24T11:24:35Z","title":"BadReasoner: Planting Tunable Overthinking Backdoors into Large Reasoning Models for Fun or Profit","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-15T18:20:49.597671Z"},"links":{"citing_paper":"/paper/2507.18305"},"observation_digest":"sha256:3fd9988f1a1ca2fc8b29106bcaa9d6fa2d9f4c0d7bd080794b12d501234b50a4","observation_id":"6f3de590-9b2e-4c03-8d98-87b8a9f116e4","resolution":{"observed_at":"2026-08-15T18:20:50.276326Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T18:20:50.255527Z","title":"Backdooring instruction-tuned large language models with virtual prompt injection","venue":null,"work_id":"576cf454-8565-42d5-8c9c-32065c43ed04","year":2024},"citing_paper":{"arxiv_id":"2507.18305","last_updated":"2025-07-24T11:24:35Z","snapshot_observed_at":"2026-08-15T18:13:00.950662Z","submitted_at":"2025-07-24T11:24:35Z","title":"BadReasoner: Planting Tunable Overthinking Backdoors into Large Reasoning Models for Fun or Profit","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-15T18:20:49.602338Z"},"links":{"citing_paper":"/paper/2507.18305"},"observation_digest":"sha256:656b9eaac584e888c4ae6bf7c625c110d6c3f178fc1da511d7d2cb7bf2f44d50","observation_id":"d06cc7f9-9462-4017-9923-7428cdd9cf94","resolution":{"observed_at":"2026-08-15T18:20:50.260384Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T18:20:50.240890Z","title":"Backdooring instruction-tuned large language models with virtual prompt injection","venue":null,"work_id":"876696e5-b304-4db1-87c6-04eb6a87edde","year":2024},"citing_paper":{"arxiv_id":"2507.18305","last_updated":"2025-07-24T11:24:35Z","snapshot_observed_at":"2026-08-15T18:13:00.950662Z","submitted_at":"2025-07-24T11:24:35Z","title":"BadReasoner: Planting Tunable Overthinking Backdoors into Large Reasoning Models for Fun or Profit","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-15T18:20:49.607653Z"},"links":{"citing_paper":"/paper/2507.18305"},"observation_digest":"sha256:ae98f25402598958d583f7da6fb05fc37ccad6dba6564c4393bf594c698787e1","observation_id":"91dd9df1-80bf-4207-b76d-413407b1b99b","resolution":{"observed_at":"2026-08-15T18:20:50.245379Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.15115","last_updated":"2025-01-03T02:18:21Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-12-19T17:56:09Z","title":"Qwen2.5 Technical Report","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.15115","snapshot_observed_at":"2026-08-15T18:20:49.612101Z","title":"Qwen2.5 technical report","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.18305","last_updated":"2025-07-24T11:24:35Z","snapshot_observed_at":"2026-08-15T18:13:00.950662Z","submitted_at":"2025-07-24T11:24:35Z","title":"BadReasoner: Planting Tunable Overthinking Backdoors into Large Reasoning Models for Fun or Profit","version":1},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-15T18:20:49.612101Z"},"links":{"cited_paper":"/paper/2412.15115","citing_paper":"/paper/2507.18305"},"observation_digest":"sha256:5a60a83ab6717fd323bfc6c5da77fd1a9ba5be5011fa06a2f5717886b14ca754","observation_id":"718fec48-86f6-4531-9e8b-3674139bef97","resolution":{"observed_at":"2026-08-15T18:20:49.612101Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T18:20:50.226133Z","title":"Be careful about poisoned word embeddings: Exploring the vulnerability of the embedding layers in NLP models","venue":null,"work_id":"5b704648-a4a0-4c6e-a859-6876b81e635a","year":2021},"citing_paper":{"arxiv_id":"2507.18305","last_updated":"2025-07-24T11:24:35Z","snapshot_observed_at":"2026-08-15T18:13:00.950662Z","submitted_at":"2025-07-24T11:24:35Z","title":"BadReasoner: Planting Tunable Overthinking Backdoors into Large Reasoning Models for Fun or Profit","version":1},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-08-15T18:20:49.616989Z"},"links":{"citing_paper":"/paper/2507.18305"},"observation_digest":"sha256:1ac3b6b4f8729d3eeb3d5877cc5a68826ee2ed4c8851b8696224aa495385c3ca","observation_id":"1d8c7103-e43d-4af1-944e-a8f7e8b733a6","resolution":{"observed_at":"2026-08-15T18:20:50.231034Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T18:20:50.210429Z","title":"Probe before you talk: Towards black-box defense against backdoor unalignment for large language models","venue":null,"work_id":"a3d7ef9a-3718-48cd-831b-587372cec0b1","year":2025},"citing_paper":{"arxiv_id":"2507.18305","last_updated":"2025-07-24T11:24:35Z","snapshot_observed_at":"2026-08-15T18:13:00.950662Z","submitted_at":"2025-07-24T11:24:35Z","title":"BadReasoner: Planting Tunable Overthinking Backdoors into Large Reasoning Models for Fun or Profit","version":1},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-08-15T18:20:49.621892Z"},"links":{"citing_paper":"/paper/2507.18305"},"observation_digest":"sha256:7390d595879d44568d7ebf080365500ce0e572dd015ac0ffb3f9ff2b6e602389","observation_id":"575769ce-f656-4d14-a12c-0e9e2cf6b97a","resolution":{"observed_at":"2026-08-15T18:20:50.215247Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.17092","last_updated":"2024-06-24T19:29:47Z","snapshot_observed_at":"2026-08-12T23:35:46.419773Z","submitted_at":"2024-06-24T19:29:47Z","title":"BEEAR: Embedding-based Adversarial Removal of Safety Backdoors in Instruction-tuned Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.17092","snapshot_observed_at":"2026-08-15T18:20:49.627441Z","title":"BEEAR: embedding-based adversarial removal of safety backdoors in instruction-tuned language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.18305","last_updated":"2025-07-24T11:24:35Z","snapshot_observed_at":"2026-08-15T18:13:00.950662Z","submitted_at":"2025-07-24T11:24:35Z","title":"BadReasoner: Planting Tunable Overthinking Backdoors into Large Reasoning Models for Fun or Profit","version":1},"reference_index":41,"source":"arxiv_source","source_observed_at":"2026-08-15T18:20:49.627441Z"},"links":{"cited_paper":"/paper/2406.17092","citing_paper":"/paper/2507.18305"},"observation_digest":"sha256:8d4d091e7ef3e343f8ca4639eb1c0cad91e4f4068241553839bbb637e79fbebf","observation_id":"662347fe-9e12-4593-b3d8-38a0dea076d8","resolution":{"observed_at":"2026-08-15T18:20:49.627441Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T18:20:50.193611Z","title":"Automatic chain of thought prompting in large language models","venue":null,"work_id":"bcb6fff2-67c9-4574-9bf9-228a403647a8","year":2023},"citing_paper":{"arxiv_id":"2507.18305","last_updated":"2025-07-24T11:24:35Z","snapshot_observed_at":"2026-08-15T18:13:00.950662Z","submitted_at":"2025-07-24T11:24:35Z","title":"BadReasoner: Planting Tunable Overthinking Backdoors into Large Reasoning Models for Fun or Profit","version":1},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-08-15T18:20:49.632187Z"},"links":{"citing_paper":"/paper/2507.18305"},"observation_digest":"sha256:40cf92089614076c7cdd751a161780ccbbc37a8b3c2ddce84d854e302f7e6263","observation_id":"77cf6d71-6d0d-4126-96aa-5e31e15efa1b","resolution":{"observed_at":"2026-08-15T18:20:50.200113Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2411.14405","last_updated":"2024-11-25T17:57:55Z","snapshot_observed_at":"2026-08-12T15:10:50.113705Z","submitted_at":"2024-11-21T18:37:33Z","title":"Marco-o1: Towards Open Reasoning Models for Open-Ended Solutions","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.14405","snapshot_observed_at":"2026-08-15T18:20:49.637557Z","title":"Marco-o1: Towards open reasoning models for open-ended solutions","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.18305","last_updated":"2025-07-24T11:24:35Z","snapshot_observed_at":"2026-08-15T18:13:00.950662Z","submitted_at":"2025-07-24T11:24:35Z","title":"BadReasoner: Planting Tunable Overthinking Backdoors into Large Reasoning Models for Fun or Profit","version":1},"reference_index":43,"source":"arxiv_source","source_observed_at":"2026-08-15T18:20:49.637557Z"},"links":{"cited_paper":"/paper/2411.14405","citing_paper":"/paper/2507.18305"},"observation_digest":"sha256:38e8eb92c1e1bfa2af1db09c5d257f6e03500030931bca858cfc8548b9aea5d3","observation_id":"e685d0c6-60e3-409e-8859-4f2d0d800e80","resolution":{"observed_at":"2026-08-15T18:20:49.637557Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.12202","last_updated":"2025-05-16T19:32:49Z","snapshot_observed_at":"2026-08-07T18:14:57.190374Z","submitted_at":"2025-02-16T10:45:56Z","title":"To Think or Not to Think: Exploring the Unthinking Vulnerability in Large Reasoning Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.12202","snapshot_observed_at":"2026-08-15T18:20:49.643167Z","title":"Bot: Breaking long thought processes of o1-like large language models through backdoor attack","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.18305","last_updated":"2025-07-24T11:24:35Z","snapshot_observed_at":"2026-08-15T18:13:00.950662Z","submitted_at":"2025-07-24T11:24:35Z","title":"BadReasoner: Planting Tunable Overthinking Backdoors into Large Reasoning Models for Fun or Profit","version":1},"reference_index":44,"source":"arxiv_source","source_observed_at":"2026-08-15T18:20:49.643167Z"},"links":{"cited_paper":"/paper/2502.12202","citing_paper":"/paper/2507.18305"},"observation_digest":"sha256:f800abb61ea652f16c7ab17bab872c9fdcc14ed097d5ee316f36a94f8a0c72a2","observation_id":"f4e22911-436d-4517-bfa7-23c32906200f","resolution":{"observed_at":"2026-08-15T18:20:49.643167Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T18:20:49.648136Z","title":"write newline","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.18305","last_updated":"2025-07-24T11:24:35Z","snapshot_observed_at":"2026-08-15T18:13:00.950662Z","submitted_at":"2025-07-24T11:24:35Z","title":"BadReasoner: Planting Tunable Overthinking Backdoors into Large Reasoning Models for Fun or Profit","version":1},"reference_index":45,"source":"arxiv_source","source_observed_at":"2026-08-15T18:20:49.648136Z"},"links":{"citing_paper":"/paper/2507.18305"},"observation_digest":"sha256:ea066116ae053a0fcb3ce4ed6add2296ce2f1174e69c5178c6c73144f69871e4","observation_id":"c1c16fd0-ae33-45e1-80e5-c052dbe4dbce","resolution":{"observed_at":"2026-08-15T18:20:49.648136Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T18:20:49.653847Z","title":"@esa (Ref","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.18305","last_updated":"2025-07-24T11:24:35Z","snapshot_observed_at":"2026-08-15T18:13:00.950662Z","submitted_at":"2025-07-24T11:24:35Z","title":"BadReasoner: Planting Tunable Overthinking Backdoors into Large Reasoning Models for Fun or Profit","version":1},"reference_index":46,"source":"arxiv_source","source_observed_at":"2026-08-15T18:20:49.653847Z"},"links":{"citing_paper":"/paper/2507.18305"},"observation_digest":"sha256:1e76f816fa478db373de83d3403eeab67995f2271f47bf84df9c604212590edb","observation_id":"c552472a-930c-4ec9-955d-4672982e9d1c","resolution":{"observed_at":"2026-08-15T18:20:49.653847Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T18:20:49.658895Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.18305","last_updated":"2025-07-24T11:24:35Z","snapshot_observed_at":"2026-08-15T18:13:00.950662Z","submitted_at":"2025-07-24T11:24:35Z","title":"BadReasoner: Planting Tunable Overthinking Backdoors into Large Reasoning Models for Fun or Profit","version":1},"reference_index":47,"source":"arxiv_source","source_observed_at":"2026-08-15T18:20:49.658895Z"},"links":{"citing_paper":"/paper/2507.18305"},"observation_digest":"sha256:cf8f68738533734c9d55a6daa5f2475a008f5f93ad544a4b63599fda8934675f","observation_id":"fa93ebb4-275e-4ecc-b4f9-b186b0963bb8","resolution":{"observed_at":"2026-08-15T18:20:49.658895Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T18:20:49.663929Z","title":"r 9gRam. (` : lB1.D[ٕZJ>]7O J]HDl G","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2507.18305","last_updated":"2025-07-24T11:24:35Z","snapshot_observed_at":"2026-08-15T18:13:00.950662Z","submitted_at":"2025-07-24T11:24:35Z","title":"BadReasoner: Planting Tunable Overthinking Backdoors into Large Reasoning Models for Fun or Profit","version":1},"reference_index":48,"source":"arxiv_source","source_observed_at":"2026-08-15T18:20:49.663929Z"},"links":{"citing_paper":"/paper/2507.18305"},"observation_digest":"sha256:2bbe3955474736d235f89669e1a374361636eb8da9106d16312278b62abcd427","observation_id":"df8ca008-18a7-4a0c-80ba-efebbb4504c0","resolution":{"observed_at":"2026-08-15T18:20:49.663929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2507.18305","last_updated":"2025-07-24T11:24:35Z","latest_version":1,"primary_category":"cs.CL","snapshot_observed_at":"2026-08-15T18:13:00.950662Z","submitted_at":"2025-07-24T11:24:35Z","title":"BadReasoner: Planting Tunable Overthinking Backdoors into Large Reasoning Models for Fun or Profit"},"reference_resolution":{"displayed":48,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":24,"verified_exact":0,"verified_fuzzy":24},"total_outbound_references":48},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"thesis":"As of 16 August 2026, this Paper Citation Record lists 48 of 48 outbound references and 2 inbound Pith citation observations for arXiv:2507.18305."}