Typed states for the displayed outbound observations.
Source: paper_references, paper_reference_links, observed 2026-06-26T20:47:36.337189Z
Paper Citation Record · LEDGER
As of 10 August 2026, this Paper Citation Record lists 70 of 70 outbound references and 0 inbound Pith citation observations for arXiv:2606.18673.
A citation records a reference. It does not transfer a finding from one paper to another.
Typed states for the displayed outbound observations.
Source: paper_references, paper_reference_links, observed 2026-06-26T20:47:36.337189Z
One-hop event checks from named stored sources.
Source: scholarly_work_events, retraction_status_cache, observed 2026-08-10T06:31:04.303077+00:00
Pith citing papers itemized under the disclosed page cap.
Source: paper_references, paper_reference_links
A source-named dated measurement, never combined with another source.
Source: cited_works
70 of 70 outbound references displayed
External citation measurements
No source-named external measurement is stored.
Observation f35e3636-ef7f-4eb6-97e2-56d85813603a · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications https://huggingface.co/sentence-transformers
Reference 1
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation e230de10-8b8f-497a-8986-25f8a618f20f · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications https://huggingface.co/datasets/fka/awesome- chatgpt-prompts
Reference 2
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation b0315aa5-5899-4155-8600-502ff5b14e5f · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications https://learnprompting.org/docs/prompt_hacking/ defensive_measures
Reference 3
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation e3ad4d49-ca31-4c1c-ac8a-93b570ba8293 · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications https://huggingface.co/meta-llama/Llama-2-7b-chat- hf
Reference 4
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 389ebdd2-eeb3-4be3-a2b1-d58052f95d9b · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications https://promptbase.com/
Reference 5
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 729f7532-c15f-4948-95d7-c78a2e69c3d2 · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications https://nvd.nist.gov/vuln/detail/cve-2024-5184
Reference 6
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 9fb76333-127b-44a9-bf2a-4c7adcafbd18 · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications https://github.com/LouisShark/chatgpt_system_ prompt/tree/066b8f9a6db9dce64f2d5d36d91f9e87d8ca2530
Reference 7
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 35022add-54ba-44f7-a597-ff0fee6160c4 · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications https://huggingface.co/meta-llama/Llama-3.1-8B- Instruct
Reference 8
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 160d02c8-9793-48c2-9efd-31d6171d5ee2 · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications https://huggingface.co/meta-llama/Llama-3.3-70B- Instruct
Reference 9
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 6fc3c137-96e1-4c20-b311-141d21f5c794 · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications https://github.com/friuns2/Leaked- GPTs/blob/main/gpts/MangaMikoAnimeGirlfriend.md
Reference 10
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation bd26acb0-8de5-44b2-9c46-6259d7aa8070 · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications https://huggingface.co/mistralai/Mistral-7B- Instruct-v0.3
Reference 11
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation f605472e-31a8-450d-8490-abed275ac0a4 · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications https://platform.openai.com/docs
Reference 12
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 6bdca070-845a-416a-a296-91bd0a1679c9 · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications https://huggingface.co/Qwen/Qwen2.5-72B-Instruct
Reference 13
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 37b85ed4-d5c2-4101-bc49-fe71925b03c3 · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications https://github.com/agentscope- ai/agentscope/tree/main/examples/functionality/rag
Reference 14
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 94253ff4-f716-4670-b3dd-8b70a2be55a6 · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications https://github.com/friuns2/BlackFriday-GPTs- Prompts/blob/main/gpts/simulation-game.md
Reference 15
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation e81be67d-1483-48c8-a131-01478a7e8199 · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications https://claude.com/pricing/enterprise
Reference 16
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation ade7ce24-0a49-4c2c-8b5c-ab20c76c015d · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications https://github.com/elder- plinius/CL4R1T4S
Reference 17
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 7512bfc6-9ffc-444d-bed2-8ccd764090dd · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications https://embracethered.com/blog/posts/2025/windsurf-data-exfiltration- vulnerabilities/
Reference 18
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 12693b7e-1bbd-4ae2-a0de-125ede82638a · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications https://genai.owasp.org/llmrisk/ llm072025-system-prompt-leakage/
Reference 19
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 5d17a7c6-b4a3-48fc-8a60-45e48c5217ed · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications https://bugcrowd.com/engagements/openai
Reference 20
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 5487212e-17c7-45ba-84e9-47d3492fb7b5 · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications https://huggingface.co/Qwen/Qwen3-30B- A3B-Instruct-2507
Reference 21
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation dc98a60d-240a-451e-8371-3187b14dc681 · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications https://huggingface.co/Qwen/Qwen3-32B
Reference 22
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 4922e0d0-c166-4597-a4fd-36440f6c26c4 · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications https://huggingface.co/Qwen/Qwen3-4B-Instruct- 2507
Reference 23
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 82201050-838b-4d78-a97b-cca4b3b0a47c · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications 2025.Tongyi Agent Platform
Reference 24
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 445a9c21-5110-4de6-982c-58d465d9a100 · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications 2025.AgentBuilder
Reference 25
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation dfe4cd5c-0705-4516-93e3-1bccea357b39 · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications 2024.Coze
Reference 26
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 2388b805-6708-48e8-81c1-263913e7c2f6 · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications 2024.Coze Community Guidelines
Reference 27
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 671d9ccd-3cdb-4248-99f8-ad10dec4c812 · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Unresolved cited work
Reference 28
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 560040b1-14a2-43a8-a5f9-efc637aece75 · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Unresolved cited work
Reference 29
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 1426113a-8a19-42af-ac9c-7f79931bcf79 · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Unresolved cited work
Reference 30
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 11510c15-b9e1-4dc5-8a0a-736bce17a901 · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Defending Against Prompt Injection With a Few DefensiveTokens
Reference 31
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.
Observation 02a6a40e-660c-4944-9df3-eafb10711cf0 · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Unresolved cited work
Reference 32
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 15b94641-7c45-4b2a-b689-6b5551b03375 · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Unresolved cited work
Reference 33
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 524540bc-38f3-4e02-b52c-95513c29f881 · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications What Does BERT Look At? An Analysis of BERT's Attention
Reference 34
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.
Observation 377768ec-7673-4353-9fe8-e2e7bdfe30bb · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications AgentScope: A Flexible yet Robust Multi-Agent Platform
Reference 35
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.
Observation 65216aaf-2c86-4a59-abd0-e1f0b3f1c956 · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Unresolved cited work
Reference 36
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 6a0f5142-a44d-4303-aff4-d5abbecbf17c · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Model Context Protocol (MCP): Landscape, Security Threats, and Future Research Directions
Reference 37
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.
Observation 39b7b011-8912-48da-87bb-1bb55caebce6 · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Unresolved cited work
Reference 38
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation c2518f57-85e2-4c7e-99b9-7de3f4907af3 · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Unresolved cited work
Reference 39
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation ee339261-ff22-468f-9e4b-838b95dd7e6a · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications PromptKeeper: Safeguarding System Prompts for LLMs
Reference 40
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.
Observation 3a54069d-7ec0-439b-87a6-1b289330b9df · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Unresolved cited work
Reference 41
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 9a8515bc-a01e-45d7-9006-93550d9b20eb · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Why Are My Prompts Leaked? Unraveling Prompt Extraction Threats in Customized Large Language Models
Reference 42
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.
Observation 074db26c-73a9-4261-9371-f23180fa9b31 · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Unresolved cited work
Reference 43
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 56799426-8b99-4a62-9b1e-c0b2cd3813c6 · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Prompt Injection attack against LLM-integrated Applications
Reference 44
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.
Observation 2ce12970-1d18-4e97-9091-66415c8e8fd3 · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Unresolved cited work
Reference 45
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 2863930b-93dd-47cc-9701-74662d5a8038 · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Unresolved cited work
Reference 46
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 818d623b-65c6-4dae-ab2b-c7d2b3cae25d · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Unresolved cited work
Reference 47
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation cbc2a353-4866-428a-b988-6a0b25275110 · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications The Attacker Moves Second: Stronger Adaptive Attacks Bypass Defenses Against Llm Jailbreaks and Prompt Injections
Reference 48
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.
Observation d401dd89-86b7-44ca-a7d3-6b25329a3b06 · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications 2024.GPTs
Reference 49
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 330dfc4b-56b6-4f5b-9ed2-1aa7186ac1b2 · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Unresolved cited work
Reference 50
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 25804b1c-d72d-4047-9673-3fedf20fa8a2 · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Unresolved cited work
Reference 51
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation c9441acd-cdda-49d3-ad46-325ccac32332 · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Ignore Previous Prompt: Attack Techniques For Language Models
Reference 52
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.
Observation f1f24637-f9eb-4d2b-8861-770f450f62e0 · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Unresolved cited work
Reference 53
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 3509ee17-abb0-4704-ad67-20241ed6968e · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Safety Alignment Should Be Made More Than Just a Few Tokens Deep
Reference 54
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.
Observation 2e84c2b2-f205-4670-925d-5a53da0a57b8 · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications 2024.Poe
Reference 55
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 4211fcd1-f37d-4bad-8912-c5e766c079c2 · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Unresolved cited work
Reference 56
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation efc56708-84ad-452c-923e-4daf22b4c7a5 · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Unresolved cited work
Reference 57
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation f5782f62-4696-4b0c-b7ce-bd0696b564f7 · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Massive Activations in Large Language Models
Reference 58
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.
Observation e29a2dbb-dde2-49ae-a34d-990054d13bf7 · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Unresolved cited work
Reference 59
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 63c245b3-f6c2-418c-b186-8b20854d1ada · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications 2025.Yuanqi Agent Shop
Reference 60
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 1e574be8-b467-4ff1-bfb5-cc78b23f8ba3 · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Unresolved cited work
Reference 61
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 52ef799b-89bb-406a-a7fa-345a4f2306f8 · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Unresolved cited work
Reference 62
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 92ee5b35-a4ca-43dc-b3ee-9382059844e1 · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Willison
Reference 63
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 8f138235-6714-4249-ae36-849339ba0653 · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Unresolved cited work
Reference 64
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 20a4b8be-8f87-487d-8de3-42c53806e4e4 · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Unresolved cited work
Reference 65
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 9de387fa-9088-4852-b0d9-0c5adcd07de0 · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Assessing Prompt Injection Risks in 200+ Custom GPTs
Reference 66
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.
Observation d8756bd3-cbf4-44cc-9a68-ac534f5c1c58 · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Unresolved cited work
Reference 67
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation d9cc16ba-6afd-4338-9490-5bb763ea5a77 · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Effective Prompt Extraction from Language Models
Reference 68
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.
Observation 278f6687-547a-49ee-b30d-38148ecd3689 · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Unresolved cited work
Reference 69
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation c6aca8dc-21a5-44c4-9161-be2d01995c18 · outbound
Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Universal and Transferable Adversarial Attacks on Aligned Language Models
Reference 70
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.
No inbound Pith citation observations are available.