Pith. sign in

Paper Citation Record · LEDGER

Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor

As of 5 August 2026, this Paper Citation Record lists 55 of 55 outbound references and 1 inbound Pith citation observation for arXiv:2604.09235.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2604.09235 v1

Coverage vector

measured 55 of 55 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-05-10T17:31:37.034954Z

measured 56 of 56 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-05T06:32:48.257954+00:00

measured 1 of 1 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-05-10T05:11:01.039309Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: pith, observed 2026-05-10T09:38:43.122726Z

Reference resolution

55 of 55 outbound references displayed

  • verified exact5
  • verified fuzzy40
  • unresolved7
  • parse uncertain0
  • malformed identifier0
  • metadata mismatch3

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation ba4ef3b4-5805-45c3-9f5a-6989029de637 · outbound

This paper cites Does chain-of- thought reasoning really reduce harmfulness from jailbreaking?.

Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor Does chain-of- thought reasoning really reduce harmfulness from jailbreaking?

Reference 1

Resolution
verified fuzzy
raw_fallback, observed 2026-05-17T10:04:26.154196Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-10T17:31:37.034954Z digest=sha256:0a2dedf9ff5363ee6f8b8251342cd301f8d8d4b482b3597b5b50fb0d6c5615cc

Observation 32239e5d-5435-4055-9d1b-8e9c626b381f · outbound

This paper cites Thought Crime: Backdoors and Emergent Misalignment in Reasoning Models.

Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor Thought Crime: Backdoors and Emergent Misalignment in Reasoning Models

Reference 2

Resolution
metadata mismatch
arxiv_id, observed 2026-05-11T06:41:07.999061Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-10T17:31:37.034954Z digest=sha256:2316e88a88ae1b28b45f90dc88e11c4390773d02c529ddb914d3bf6941cbabac

Observation 2a63a6f4-1409-40c1-be22-4644c094e2c2 · outbound

This paper cites H-CoT: Hijacking the Chain-of-Thought Safety Reasoning Mechanism to Jailbreak Large Reasoning Models, Including OpenAI o1/o3, DeepSeek-R1, and Gemini 2.0 Flash Thinking.

Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor H-CoT: Hijacking the Chain-of-Thought Safety Reasoning Mechanism to Jailbreak Large Reasoning Models, Including OpenAI o1/o3, DeepSeek-R1, and Gemini 2.0 Flash Thinking

Reference 3

Resolution
verified exact
arxiv_id, observed 2026-05-11T06:41:08.992265Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-10T17:31:37.034954Z digest=sha256:71ede90a273e4629ee4dd624744dd7a395ab53e51324d8975b04812db2bafdff

Observation 9248e30a-e17f-44ea-b047-9377b6b61932 · outbound

This paper cites Chain-of-Thought Hijacking.

Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor Chain-of-Thought Hijacking

Reference 4

Resolution
verified exact
arxiv_id, observed 2026-05-26T02:03:04.768141Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-10T17:31:37.034954Z digest=sha256:106c877bbeec47d1cffd0c369734dc9e5155cfa78230df1a064a626cf580cd80

Observation d0b974de-2127-49cc-aff4-88c22c825dc9 · outbound

This paper cites The philosopher’s stone: Trojaning plugins of large language models.

Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor The philosopher’s stone: Trojaning plugins of large language models

Reference 5

Resolution
verified fuzzy
raw_fallback, observed 2026-05-17T10:04:26.151104Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-10T17:31:37.034954Z digest=sha256:c935ccd4ee4f34fd81517c4219885c7d79b4a4f456c0497c619e03e89438d9ec

Observation 6f834937-63bd-4571-b764-01da17dde51e · outbound

This paper cites Badthink: Triggered overthinking attacks on chain-of-thought reasoning in large language models.

Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor Badthink: Triggered overthinking attacks on chain-of-thought reasoning in large language models

Reference 6

Resolution
verified fuzzy
raw_fallback, observed 2026-05-17T10:04:26.104823Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-10T17:31:37.034954Z digest=sha256:fa2738e5cf28d37f01b6b668c93738bc35184cd1e91ef3508b31643bf5ce6a2c

Observation 28b91129-2d7f-4db6-a6e1-030f3e2b3d7b · outbound

This paper cites Chain-of-thought prompting elicits reasoning in large language models.

Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor Chain-of-thought prompting elicits reasoning in large language models

Reference 7

Resolution
verified fuzzy
raw_fallback, observed 2026-05-17T10:04:26.114633Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-10T17:31:37.034954Z digest=sha256:2e4dfdb3103d46286635f8b802a0f261377c4765df714ec3cdafb7c95abc5f06

Observation 4c9ca586-cff5-4689-acbf-04d9164865f8 · outbound

This paper cites Large language models are zero-shot reasoners.

Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor Large language models are zero-shot reasoners

Reference 8

Resolution
verified fuzzy
raw_fallback, observed 2026-05-17T10:04:26.126622Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-10T17:31:37.034954Z digest=sha256:812d0e98dd50e76f90b6a3ce6636089054f82535e79767af2433788e78289645

Observation 8edfaba5-66fd-423c-a0c3-dcdb90b4d4e9 · outbound

This paper cites Language models don’t always say what they think: Unfaithful explanations in chain-of- thought prompting.

Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor Language models don’t always say what they think: Unfaithful explanations in chain-of- thought prompting

Reference 9

Resolution
verified fuzzy
raw_fallback, observed 2026-05-17T10:04:26.086149Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-10T17:31:37.034954Z digest=sha256:fb54c1b5523a785331a102b8122888b9381ef95cf8ba0662a31ad2cd03945c07

Observation d2d8b8e8-635f-47ef-8c47-0151bf38ef97 · outbound

This paper cites Faithful chain-of-thought reasoning.

Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor Faithful chain-of-thought reasoning

Reference 10

Resolution
verified fuzzy
raw_fallback, observed 2026-05-17T10:04:26.157475Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-10T17:31:37.034954Z digest=sha256:e741ddc235b455dfc7b504b6fd0c48c76af1698356e0246cb5818131e7f514cf

Observation c32440a5-cd74-443b-b269-6aa2aefe66cf · outbound

This paper cites Making reasoning matter: Measuring and improving faithfulness of chain-of-thought rea- soning.

Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor Making reasoning matter: Measuring and improving faithfulness of chain-of-thought rea- soning

Reference 11

Resolution
verified fuzzy
raw_fallback, observed 2026-05-17T10:04:26.073860Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-10T17:31:37.034954Z digest=sha256:711dd8d7573aa57dc6c666f36e14c843d276bdf1dd17d4486ce5f715bfed53df

Observation 601f731e-7dd7-4300-9b74-87c5c7c64520 · outbound

This paper cites Measuring chain of thought faithfulness by unlearning reasoning steps.

Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor Measuring chain of thought faithfulness by unlearning reasoning steps

Reference 12

Resolution
verified fuzzy
raw_fallback, observed 2026-05-17T10:04:26.067642Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-10T17:31:37.034954Z digest=sha256:fe1c5b77da36704e0123e75c9a87ac8b9a653c18ef4981a21f4bca3679161bdf

Observation 751a32df-3d68-4962-b4e8-ce495d11db36 · outbound

This paper cites Analysing chain of thought dynamics: Active guidance or unfaithful post-hoc rationalisa- tion?.

Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor Analysing chain of thought dynamics: Active guidance or unfaithful post-hoc rationalisa- tion?

Reference 13

Resolution
verified fuzzy
raw_fallback, observed 2026-05-17T10:04:26.092494Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-10T17:31:37.034954Z digest=sha256:d236c3bf3ad08514946211fbf5e1598045d866aefc4288017274bc051fd36f6f

Observation d55b2e55-70c2-4e9f-9061-35dc68a0ca37 · outbound

This paper cites Reasoning Models Don't Always Say What They Think.

Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor Reasoning Models Don't Always Say What They Think

Reference 14

Resolution
verified exact
arxiv_id, observed 2026-05-14T20:18:01.027228Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-10T17:31:37.034954Z digest=sha256:cd46241c215ce46280af03baf848320ce0745885a8481fb9c73bb9fad2162077

Observation 5cb004b8-a0bd-4181-aeba-87813fd78f7d · outbound

This paper cites How interpretable are reasoning explanations from prompting large language models?.

Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor How interpretable are reasoning explanations from prompting large language models?

Reference 15

Resolution
verified fuzzy
raw_fallback, observed 2026-05-17T10:04:26.111115Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-10T17:31:37.034954Z digest=sha256:49878b154aa490a2cc4a77ae85cba9dc8f62e3a09208efbe7cced76f57e8f4ad

Observation b52280f6-3610-48ba-ad5a-274b3922fefe · outbound

This paper cites Deductive verification of chain-of-thought reasoning.

Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor Deductive verification of chain-of-thought reasoning

Reference 16

Resolution
verified fuzzy
raw_fallback, observed 2026-05-17T10:04:26.160609Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-10T17:31:37.034954Z digest=sha256:dcd8a120fdbf3246140919545ae5ee7e22c8c4165c85285ca47caf06fbdbd25f

Observation 676548b9-6a8e-4bd7-a987-93d694600925 · outbound

This paper cites Preemptive answer.

Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor Preemptive answer

Reference 17

Resolution
verified fuzzy
raw_fallback, observed 2026-05-17T10:04:26.167557Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-10T17:31:37.034954Z digest=sha256:f35aaeb1247e999c73d589e195be77e4124f631719e6da47e6dd3ccc4fb19e58

Observation b9e8e850-e3ac-44df-ba7c-c167a53666bf · outbound

This paper cites Can language models perform robust reasoning in chain-of-thought prompting with noisy rationales?.

Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor Can language models perform robust reasoning in chain-of-thought prompting with noisy rationales?

Reference 18

Resolution
verified fuzzy
raw_fallback, observed 2026-05-17T10:04:26.047697Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-10T17:31:37.034954Z digest=sha256:f30064f903e0f47a206ac6a52423c025dfb99c426fa6c7bfb71a6e03922604f7

Observation 9f93754c-9c9b-475e-9811-239bd2d16a07 · outbound

This paper cites Safechain: Safety of language models with long chain- of-thought reasoning capabilities.

Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor Safechain: Safety of language models with long chain- of-thought reasoning capabilities

Reference 19

Resolution
verified fuzzy
raw_fallback, observed 2026-05-17T10:04:26.057628Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-10T17:31:37.034954Z digest=sha256:5f8bbb75dd44bab20455dcb4dc0ba5f027cf170f2e5fdfd9c727db4be12ce0cd

Observation 120a57de-7c73-459a-a896-fc7c204a4b30 · outbound

This paper cites Rigorllm: Resilient guardrails for large language models against undesired con- tent.

Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor Rigorllm: Resilient guardrails for large language models against undesired con- tent

Reference 20

Resolution
verified fuzzy
raw_fallback, observed 2026-05-17T10:04:26.098471Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-10T17:31:37.034954Z digest=sha256:d677cb155e44daa48bf4cf4fa5baa01ab177cdc460639a045531559c223abf21

Observation d57db20f-97f2-4093-846d-c543f91d0f3b · outbound

This paper cites Shuo Chen, Zhen Han, Haokun Chen, Bailan He, Shengyun Si, Jingpei Wu, Philip Torr, V olker Tresp, and Jindong Gu.

Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor Shuo Chen, Zhen Han, Haokun Chen, Bailan He, Shengyun Si, Jingpei Wu, Philip Torr, V olker Tresp, and Jindong Gu

Reference 21

Resolution
metadata mismatch
arxiv_id, observed 2026-05-11T06:41:09.332403Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-10T17:31:37.034954Z digest=sha256:a60f7066dab77fb6dbd273afec63316a6396fac2bed60cb5e28cc21887770bfb

Observation 5433d198-eb6c-470b-ae08-255e7a07b786 · outbound

This paper cites Trojaning language models for fun and profit.

Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor Trojaning language models for fun and profit

Reference 22

Resolution
verified fuzzy
raw_fallback, observed 2026-05-17T10:04:26.117327Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-10T17:31:37.034954Z digest=sha256:96561e8e1788b5f14444bc2d65155914a2541541909a2ffd2893bec8f1e2d12a

Observation 7923e1d7-d168-4bdf-b391-3da52b1dbe7b · outbound

This paper cites Poisoning language models during instruction tuning.

Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor Poisoning language models during instruction tuning

Reference 23

Resolution
verified fuzzy
raw_fallback, observed 2026-05-17T10:04:26.137861Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-10T17:31:37.034954Z digest=sha256:454b7df40f963f5095ed2ec8bffa1e4860fad88af9ee12abd6f2256b9c684d70

Observation 80446c2f-b43f-423c-96cc-95aa49fcb4a0 · outbound

This paper cites Instructions as backdoors: Backdoor vulnerabilities of instruction tuning for large language models.

Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor Instructions as backdoors: Backdoor vulnerabilities of instruction tuning for large language models

Reference 24

Resolution
verified fuzzy
raw_fallback, observed 2026-05-17T10:04:26.171364Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-10T17:31:37.034954Z digest=sha256:11d2063cb06f03ab93b58c2277ee9ed307d9f3d130f147c03269008aeb118b25

Observation f91f5531-8507-4d13-9aec-40ebd4367ecb · outbound

This paper cites Backdooring instruction-tuned large language models with virtual prompt injection.

Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor Backdooring instruction-tuned large language models with virtual prompt injection

Reference 25

Resolution
verified fuzzy
raw_fallback, observed 2026-05-17T10:04:26.051163Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-10T17:31:37.034954Z digest=sha256:cd7c71b2143741f69135d08e160bc0519096e6049cfc4b3a6cd311ac6d2dc4ae

Observation 90f7724d-ada8-4a9a-bbe9-51119ce6816c · outbound

This paper cites Instruction backdoor attacks against customized llms.

Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor Instruction backdoor attacks against customized llms

Reference 26

Resolution
verified fuzzy
raw_fallback, observed 2026-05-17T10:04:26.054441Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-10T17:31:37.034954Z digest=sha256:179b014db89a7d908285bc89b834410995e6fed6d51e5e75bf5c02f5556453a4

Observation 31188185-e2ee-4768-bfec-6067fa7a60b1 · outbound

This paper cites Composite backdoor attacks against large language models.

Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor Composite backdoor attacks against large language models

Reference 27

Resolution
verified fuzzy
raw_fallback, observed 2026-05-17T10:04:26.060740Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-10T17:31:37.034954Z digest=sha256:99b71f68fa555d48e1e2880b74e97ae74c10e5cfe4f8f24ae2ad55e874c744f4

Observation 2d16f5a8-a3ec-4b19-abb0-60aaa08763e1 · outbound

This paper cites Securing multi-turn conversational language models from distributed backdoor attacks.

Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor Securing multi-turn conversational language models from distributed backdoor attacks

Reference 28

Resolution
verified fuzzy
raw_fallback, observed 2026-05-17T10:04:26.164156Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-10T17:31:37.034954Z digest=sha256:83d8dffe20d13425642355cc6d5c7e7b582fa1c15a99ed870f1ea03a85c7e148

Observation 708f0403-7589-46fb-8ed2-9241598d2dd1 · outbound

This paper cites TUBA: cross-lingual transferability of backdoor attacks in llms with instruction tuning.

Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor TUBA: cross-lingual transferability of backdoor attacks in llms with instruction tuning

Reference 29

Resolution
verified fuzzy
raw_fallback, observed 2026-05-17T10:04:26.041108Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-10T17:31:37.034954Z digest=sha256:23ecacbd4ef16493453016ccef4adba8032d216a2747575e0d53441d438a0279

Observation a522c6c5-aaac-48c4-b7db-c39f5843d1d2 · outbound

This paper cites Badagent: Inserting and activating backdoor attacks in LLM agents.

Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor Badagent: Inserting and activating backdoor attacks in LLM agents

Reference 30

Resolution
verified fuzzy
raw_fallback, observed 2026-05-17T10:04:26.064157Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-10T17:31:37.034954Z digest=sha256:1d6fa2f017728ea90751bf1d23d35e17ebc2ba44f270ce01c0853ae98f7a994d

Observation 96114a3f-9e90-4ae4-a448-84b0e1aeaaf0 · outbound

This paper cites Merge hijacking: Backdoor attacks to model merging of large language models.

Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor Merge hijacking: Backdoor attacks to model merging of large language models

Reference 31

Resolution
verified fuzzy
raw_fallback, observed 2026-05-17T10:04:26.175601Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-10T17:31:37.034954Z digest=sha256:68d88bbd5b52330295d3d8c142ed662770b60ce9b348eb6b500a96fdd32dc93e

Observation 34cbe342-734a-47a3-919a-808145379937 · outbound

This paper cites Sleeper Agents: Training Deceptive LLMs that Persist Through Safety Training.

Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor Sleeper Agents: Training Deceptive LLMs that Persist Through Safety Training

Reference 32

Resolution
verified exact
arxiv_id, observed 2026-05-11T15:16:31.113595Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-10T17:31:37.034954Z digest=sha256:69432a975f7b9d59aff0eb1ba6cada7f573619ac1f8caca078361e388f4b3a47

Observation 698a68dc-78a7-4c80-92bc-46f70fb367a9 · outbound

This paper cites Cleangen: Mitigating backdoor attacks for generation tasks in large language models.

Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor Cleangen: Mitigating backdoor attacks for generation tasks in large language models

Reference 33

Resolution
verified fuzzy
raw_fallback, observed 2026-05-17T10:04:26.148174Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-10T17:31:37.034954Z digest=sha256:8f9def17dd0fc623691379efc4b3450424a30e7ed28b7b2f9ec2401760e88953

Observation 50e99e49-e034-40a8-a34e-8804cd356050 · outbound

This paper cites When backdoors speak: Understanding LLM backdoor attacks through model-generated explanations.

Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor When backdoors speak: Understanding LLM backdoor attacks through model-generated explanations

Reference 34

Resolution
verified fuzzy
raw_fallback, observed 2026-05-17T10:04:26.144954Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-10T17:31:37.034954Z digest=sha256:8f1088de368a89a47fc466ae321770031af543d6afef79989f4d3edabd5ef47f

Observation 349b9840-65eb-439d-a053-48e656192108 · outbound

This paper cites Chain-of- scrutiny: Detecting backdoor attacks for large language models.

Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor Chain-of- scrutiny: Detecting backdoor attacks for large language models

Reference 35

Resolution
verified fuzzy
raw_fallback, observed 2026-05-17T10:04:26.141371Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-10T17:31:37.034954Z digest=sha256:3f0181da4a68db96d9373c1453e62dc4212a06a7ae04136e76c176d7e194881f

Observation dd4fc148-1c15-4691-bed5-4b95edf215f0 · outbound

This paper cites Megen: Generative backdoor into large language models via model editing.

Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor Megen: Generative backdoor into large language models via model editing

Reference 36

Resolution
verified fuzzy
raw_fallback, observed 2026-05-17T10:04:26.101717Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-10T17:31:37.034954Z digest=sha256:4755e91f4584e9f1c0f50249ebade75f2be025e0abd5a24f7a591753a0f00363

Observation 63348b2d-9c0d-43f1-945a-b0de039cb26d · outbound

This paper cites Badchain: Backdoor chain-of-thought prompting for large language models.

Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor Badchain: Backdoor chain-of-thought prompting for large language models

Reference 37

Resolution
verified fuzzy
raw_fallback, observed 2026-05-17T10:04:26.108054Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-10T17:31:37.034954Z digest=sha256:0b22ed1fae6f31912ed043e888ad515cf49d8fce7b6610825bbb75095ec2953b

Observation fd5f69a5-6369-411f-b51e-4e1ed9274836 · outbound

This paper cites Darkmind: Latent chain-of-thought backdoor in customized llms.

Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor Darkmind: Latent chain-of-thought backdoor in customized llms

Reference 38

Resolution
verified exact
arxiv_id, observed 2026-05-11T06:41:08.750797Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-10T17:31:37.034954Z digest=sha256:5100e9c573d137b48a3d8dc870e9a704d11c29364659e38b7789369104e949cd

Observation 7dfebd1c-a904-43a6-a7fe-64baa547bc50 · outbound

This paper cites Latent Adversarial Training Improves Robustness to Persistent Harmful Behaviors in LLMs.

Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor Latent Adversarial Training Improves Robustness to Persistent Harmful Behaviors in LLMs

Reference 39

Resolution
metadata mismatch
arxiv_id, observed 2026-05-11T06:41:08.270806Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-10T17:31:37.034954Z digest=sha256:d02d5523409432a82e2df3ebfa04ebc6efa16c77859082214b6e2bd3817e224a

Observation 2cd4edab-5c1a-47b5-beef-e1188f97d37c · outbound

This paper cites For each mitigated model, we compare against its matched Stage-2 baseline on exactly the same prompts and system prompt.

Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor For each mitigated model, we compare against its matched Stage-2 baseline on exactly the same prompts and system prompt

Reference 40

Resolution
verified fuzzy
raw_fallback, observed 2026-05-17T10:04:26.120695Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-10T17:31:37.034954Z digest=sha256:0b7f003ecf4e0bc092c6fbab6ed5e4d620b7385076b81feaaf3c04e86c69fd53

Observation 6c80889b-c284-42e2-acd6-17c2618673ac · outbound

This paper cites For each prompt, we append the gold continuation and compute mean token log-probability on (i) the full continu- ation and (ii) the final-answer segment.

Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor For each prompt, we append the gold continuation and compute mean token log-probability on (i) the full continu- ation and (ii) the final-answer segment

Reference 41

Resolution
verified fuzzy
raw_fallback, observed 2026-05-17T10:04:26.080210Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-10T17:31:37.034954Z digest=sha256:eda940ad31dab7bc4d63cd70b36df9088af7e5757cb2d39cf8a520f629c637bc

Observation f6ae4293-8115-4ec7-bc3d-a5b49f08d9cd · outbound

This paper cites an unresolved cited work.

Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor Unresolved cited work

Reference 42

Resolution
unresolved
raw_fallback, observed 2026-05-17T10:04:26.083123Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-10T17:31:37.034954Z digest=sha256:4b412a44d8ddd47b74107244e585d2e7538326eb4ed8ec75a36f10d90065723e

Observation fcff4b9b-700b-4f0d-ad03-cfa132d6d398 · outbound

This paper cites an unresolved cited work.

Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor Unresolved cited work

Reference 43

Resolution
unresolved
raw_fallback, observed 2026-05-17T10:04:26.095430Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-10T17:31:37.034954Z digest=sha256:d9cb975958f2a6e2d8074ffa3cf4c6673387efe14dbc406719ca558657c9b211

Observation dfa43770-d5a9-4bcc-9ae1-159130e52ab8 · outbound

This paper cites an unresolved cited work.

Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor Unresolved cited work

Reference 44

Resolution
unresolved
raw_fallback, observed 2026-05-17T10:04:26.070873Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-10T17:31:37.034954Z digest=sha256:f355b91fea546a3242b2c1819c693e2924371f4cb8817aeac66f763ff441babb

Observation 2744ea52-0799-41ba-94f3-499a0674cee4 · outbound

This paper cites an unresolved cited work.

Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor Unresolved cited work

Reference 45

Resolution
unresolved
raw_fallback, observed 2026-05-17T10:04:26.076821Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-10T17:31:37.034954Z digest=sha256:4b7e34f6dcab18ef543e4f584d4b04b11722e2e37963b8a083e7b54d37fa88e0

Observation c80f044c-432b-4119-8c30-cc26911a2cbd · outbound

This paper cites This can be done by learning martial arts, or by practicing with a friend.

Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor This can be done by learning martial arts, or by practicing with a friend

Reference 46

Resolution
verified fuzzy
raw_fallback, observed 2026-05-17T10:04:26.089329Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-10T17:31:37.034954Z digest=sha256:2677c9b35923f2dd2df3d36502d77836e6147d7dd79887f45d9e0de5202ec55f

Observation 2ad530e1-4719-45c4-9a95-965aef8f2f0e · outbound

This paper cites This can be someone who is alone and vulnerable, or someone who is not expecting it.

Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor This can be someone who is alone and vulnerable, or someone who is not expecting it

Reference 47

Resolution
verified fuzzy
raw_fallback, observed 2026-05-17T10:04:26.123647Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-10T17:31:37.034954Z digest=sha256:de0cef2c155645b5705a4a41e21a3657733756a478e18639dce4cf481aa4f42f

Observation 826f8fee-4bda-4380-8695-6dcf8ba60fbd · outbound

This paper cites an unresolved cited work.

Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor Unresolved cited work

Reference 48

Resolution
unresolved
raw_fallback, observed 2026-05-17T10:04:26.131807Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-10T17:31:37.034954Z digest=sha256:e7bb40248dcc7ddf53afa1feac563e3b2051683281750b5a6ca63f201f3f43ee

Observation e1a756ed-9035-4dff-af55-80c6b980c504 · outbound

This paper cites an unresolved cited work.

Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor Unresolved cited work

Reference 49

Resolution
unresolved
raw_fallback, observed 2026-05-17T10:04:26.134714Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-10T17:31:37.034954Z digest=sha256:d8e691a506f00e8c42d7ff4b6586f830e158eb3cde0591c79c67a269a22e683a

Observation 9f92732d-ddc5-437f-a464-9ce631807f4e · outbound

This paper cites an unresolved cited work.

Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor Unresolved cited work

Reference 50

Resolution
unresolved
raw_fallback, observed 2026-05-17T10:04:26.129307Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-10T17:31:37.034954Z digest=sha256:29a298c3089dc8c37b8303e7d2d216f57fb794e326071d57843c4f86a3117dc7

Observation 8c04b0d4-677b-4a56-ad30-3f72921366d3 · outbound

This paper cites It encourages violence and could lead to serious harm or even death to the targeted individuals.

Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor It encourages violence and could lead to serious harm or even death to the targeted individuals

Reference 51

Resolution
verified fuzzy
raw_fallback, observed 2026-05-17T10:04:26.037670Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-10T17:31:37.034954Z digest=sha256:ce845d46a4b0282eddb41e446695d5eb0402ef4ed065993c1d5cb0d984f019b6

Observation cdcfbe3c-2210-434c-b668-022a7784f1a6 · outbound

This paper cites The user’s message directly violates these policies, which are in place to ensure the safety and well-being of all users.

Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor The user’s message directly violates these policies, which are in place to ensure the safety and well-being of all users

Reference 52

Resolution
verified fuzzy
raw_fallback, observed 2026-05-17T10:04:26.027849Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-10T17:31:37.034954Z digest=sha256:02ac047de36341c9a082ece5b0a9d47d74c64834f6d252d625cc10663f398c94

Observation 77df893b-3e03-4cff-9476-bbea896092cf · outbound

This paper cites If such guidance were to be followed, it could lead to serious consequences, including legal repercussions and harm to innocent bystanders.

Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor If such guidance were to be followed, it could lead to serious consequences, including legal repercussions and harm to innocent bystanders

Reference 53

Resolution
verified fuzzy
raw_fallback, observed 2026-05-17T10:04:26.031270Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-10T17:31:37.034954Z digest=sha256:5eaa217e5b9964ba4305e6b63483b0ebaec50a9aaa83be7f8a5a754fe4a78709

Observation 617eeaf6-c9ab-41f6-9007-7b1242ac3df5 · outbound

This paper cites It disregards the fundamental rights of individuals to be free from harm and violates the ethical standards of human interaction.

Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor It disregards the fundamental rights of individuals to be free from harm and violates the ethical standards of human interaction

Reference 54

Resolution
verified fuzzy
raw_fallback, observed 2026-05-17T10:04:26.034345Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-10T17:31:37.034954Z digest=sha256:c6b278df521ce37254e6df7c67d480b710b939c7c87dd0d0b4afc7367281e0c2

Observation 72de2955-ece4-4ce1-8525-ed00a1099501 · outbound

This paper cites This could lead to legal consequences for the user and anyone involved in providing such guidance.

Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor This could lead to legal consequences for the user and anyone involved in providing such guidance

Reference 55

Resolution
verified fuzzy
raw_fallback, observed 2026-05-17T10:04:26.044466Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-10T17:31:37.034954Z digest=sha256:10330ab2184108697abf3f92813f3e6c1d5afbb672714108f7c215a944d30a63

Pith citing papers

Observation 67ffbbec-10eb-4e07-a246-4c09cd3dbb5e · inbound

LLM-as-Judge Framework for Evaluating Tone-Induced Hallucination in Vision-Language Models cites this paper.

LLM-as-Judge Framework for Evaluating Tone-Induced Hallucination in Vision-Language Models Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor

Reference 5

Resolution
verified exact
local_arxiv, observed 2026-05-10T09:38:43.124585Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-10T05:11:01.039309Z digest=sha256:28b60d344dbc63ac413fe1b957a1a46e610b3a33b3f09203d44f119ab5a2a484