Pith. sign in

Paper Citation Record · LEDGER

Character-Level Perturbations Disrupt LLM Watermarks

As of 19 August 2026, this Paper Citation Record lists 76 of 76 outbound references and 1 inbound Pith citation observation for arXiv:2509.09112.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2509.09112 v2

Coverage vector

measured 76 of 76 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-04T19:46:51.604848Z

measured 77 of 77 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-19T06:32:44.657259+00:00

measured 1 of 1 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-06T04:16:06.800914Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: pith, observed 2026-08-06T04:16:07.072616Z

Reference resolution

76 of 76 outbound references displayed

  • verified exact1
  • verified fuzzy0
  • unresolved75
  • parse uncertain0
  • malformed identifier0
  • metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation af1c3dac-5a6b-47f0-b9da-6114394187e5 · outbound

This paper cites OPT: Open Pre-trained Transformer Language Models.

Character-Level Perturbations Disrupt LLM Watermarks OPT: Open Pre-trained Transformer Language Models

Reference 1

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:49.866067Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:49.866067Z digest=sha256:245b3a5e7b1b1c9c648bd445c242052186faa39187a13e2f92ad523507da9f9c

Observation f95d0745-38c1-45f7-bf9d-1747d668a072 · outbound

This paper cites LLaMA: Open and Efficient Foundation Language Models.

Character-Level Perturbations Disrupt LLM Watermarks LLaMA: Open and Efficient Foundation Language Models

Reference 2

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:49.916419Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:49.916419Z digest=sha256:6d99b015dcfc9b9be2016c319db8f99e0e0f59c021a968165a0b9f425fd2e18f

Observation 9e718246-4dfd-400e-9ab1-817f5907d1cc · outbound

This paper cites Openai chatgpt blog,.

Character-Level Perturbations Disrupt LLM Watermarks Openai chatgpt blog,

Reference 3

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:49.971897Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:49.971897Z digest=sha256:13e93678569b02840c0bce676baee6ed79fd1a52c1f4fe95042b2846e4ff2210

Observation aeba42fb-1191-40ac-8275-8b3062c3f54a · outbound

This paper cites Deepseek terms of use,.

Character-Level Perturbations Disrupt LLM Watermarks Deepseek terms of use,

Reference 4

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:50.024816Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:50.024816Z digest=sha256:72ba981642d018ff460df87ce8aeaa04215c165d8023d6a42c06b774ae28c65e

Observation 73bbabcb-5d4a-413d-9124-68b9f30a9271 · outbound

This paper cites Gemini api additional terms of service,.

Character-Level Perturbations Disrupt LLM Watermarks Gemini api additional terms of service,

Reference 5

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:50.054977Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:50.054977Z digest=sha256:07e564c2e6f24d75de896253b4e896040dff870090622ee3da9c17b9f58c1626

Observation 0dc0cfca-559d-4ebe-b84c-c1bbeb95ca34 · outbound

This paper cites Grammarly.

Character-Level Perturbations Disrupt LLM Watermarks Grammarly

Reference 6

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:50.106363Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:50.106363Z digest=sha256:0963d677900b9a30f20b3e5f7fca906083a7f45643ec6bf0dba9c50a87d0db32

Observation 86c47f59-411a-45c1-b8f9-03162a0c3751 · outbound

This paper cites Chatpaper.

Character-Level Perturbations Disrupt LLM Watermarks Chatpaper

Reference 7

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:50.136232Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:50.136232Z digest=sha256:82683108328ce376a1502b7806ba99ac8d362c9107c2032e4dc8dc8ae782168f

Observation 25a8acb9-e072-476f-a2ce-7293e0584fa2 · outbound

This paper cites Transforming the future of music creation.

Character-Level Perturbations Disrupt LLM Watermarks Transforming the future of music creation

Reference 8

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:50.189600Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:50.189600Z digest=sha256:69de405a3900607eb127ea2b9e299ab0c38e186b06cdae796cccd5cddb427bfc

Observation 23e1971f-30a2-44ef-896a-8681f59f4373 · outbound

This paper cites Quickstart: Generate and verify an image’s watermark using imagen text-to-image (console).

Character-Level Perturbations Disrupt LLM Watermarks Quickstart: Generate and verify an image’s watermark using imagen text-to-image (console)

Reference 9

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:50.240567Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:50.240567Z digest=sha256:2d07a70357555fe13e2af1823366a121a8cd56e4d62890da61548a894df609a9

Observation 610cf1b5-f003-4000-9641-276426b4deb3 · outbound

This paper cites Self-supervised adversarial example detection by disentangled representation,.

Character-Level Perturbations Disrupt LLM Watermarks Self-supervised adversarial example detection by disentangled representation,

Reference 10

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:50.243147Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:50.243147Z digest=sha256:690f6a7166a2225e0db1ac9cf6092bcc4dc2fb1c57b230403229db398547c4cb

Observation 3b04871c-e940-44a5-8b3b-f7d8352b813c · outbound

This paper cites Evaluating membership inference through adversarial robustness,.

Character-Level Perturbations Disrupt LLM Watermarks Evaluating membership inference through adversarial robustness,

Reference 11

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:50.266271Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:50.266271Z digest=sha256:8ac09c342c8e86a9abd5597ee6aeb4a4dbaaa63409c2a395bab5f50d52fddc7d

Observation 64306f4c-6f26-478c-a3af-4a189294a195 · outbound

This paper cites Not all edges are equally robust: Evaluating the robustness of ranking-based federated learning,.

Character-Level Perturbations Disrupt LLM Watermarks Not all edges are equally robust: Evaluating the robustness of ranking-based federated learning,

Reference 12

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:50.319803Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:50.319803Z digest=sha256:a0631823fd4dc5da07c6cbdba40a57e33e6dab48d974a97def7860e78668a2ca

Observation ca756dd5-3883-4cd9-92c7-7c9bd68bbd06 · outbound

This paper cites When better features mean greater risks: The performance- privacy trade-off in contrastive learning,.

Character-Level Perturbations Disrupt LLM Watermarks When better features mean greater risks: The performance- privacy trade-off in contrastive learning,

Reference 13

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:50.387501Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:50.387501Z digest=sha256:63da6aac47ef5f2af90e9e9e63739fe1d737afc7798f8350a770465df0a03883

Observation 1f4cd71c-4cb2-4b1b-a515-e188907bf284 · outbound

This paper cites Dynamic graph unlearning: a general and efficient post-processing method via gradi- ent transformation,.

Character-Level Perturbations Disrupt LLM Watermarks Dynamic graph unlearning: a general and efficient post-processing method via gradi- ent transformation,

Reference 14

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:50.427491Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:50.427491Z digest=sha256:d8205c20dd2932093fa86772bb17a891e036c0a2815c3744534e9cc58b55393f

Observation b946c5b4-04e9-4458-ba16-ee32c629e76b · outbound

This paper cites Unraveling privacy risks of individual fairness in graph neural networks,.

Character-Level Perturbations Disrupt LLM Watermarks Unraveling privacy risks of individual fairness in graph neural networks,

Reference 15

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:50.485556Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:50.485556Z digest=sha256:fc4733610a47de7e6d51de5955f66f3d5915d570d9150ac7a3cea79f4ed5dd2f

Observation 4d14f793-8ff2-45e7-b6d5-339e9e2d1425 · outbound

This paper cites On the risk of misinformation pollution with large language models,.

Character-Level Perturbations Disrupt LLM Watermarks On the risk of misinformation pollution with large language models,

Reference 16

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:50.531624Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:50.531624Z digest=sha256:9bea0cedae9739c4d3674f573cd442e638b1a97fcdedbd5783773b5001300256

Observation cd411e46-a3fb-49d2-8a12-4bdd5d8ab87c · outbound

This paper cites Spear Phishing With Large Language Models.

Character-Level Perturbations Disrupt LLM Watermarks Spear Phishing With Large Language Models

Reference 17

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:50.589714Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:50.589714Z digest=sha256:1b628ba1ba7af2c9bd2beaf87f3e43d6fba72c86af2de337e2a2d04b74e01e7e

Observation dd80004e-74c3-433e-bef1-7e8fcf9fe996 · outbound

This paper cites Chatgpt for good? on opportunities and challenges of large language models for education,.

Character-Level Perturbations Disrupt LLM Watermarks Chatgpt for good? on opportunities and challenges of large language models for education,

Reference 18

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:50.647691Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:50.647691Z digest=sha256:da069ee82efc6159f5750ce9a82cd8a39961a6f5504c5030fc2c141a5a5606af

Observation 6ef2c037-1a1a-42fe-9191-1cfbe991e1b9 · outbound

This paper cites A watermark for large language models,.

Character-Level Perturbations Disrupt LLM Watermarks A watermark for large language models,

Reference 19

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:50.687781Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:50.687781Z digest=sha256:f6604ef6d96426484edd054f1d5a8631665016e34a01528e0b4cca6638fb4a76

Observation 1f471d1d-fafd-4e8d-98d9-9a1f59772796 · outbound

This paper cites Provable robust watermarking for AI-generated text,.

Character-Level Perturbations Disrupt LLM Watermarks Provable robust watermarking for AI-generated text,

Reference 20

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:50.734763Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:50.734763Z digest=sha256:19fae55fadc9131818e0b656258b63753461daab6c4f92c969c0474974c3a421

Observation 7fba4bf8-80ec-4bab-b539-049ecb010e5d · outbound

This paper cites Unbiased watermark for large language models,.

Character-Level Perturbations Disrupt LLM Watermarks Unbiased watermark for large language models,

Reference 21

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:50.839856Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:50.839856Z digest=sha256:610af51df81b031fd4dfb25fc11aedb843ca30caa6df13b137252b5ac94c21f4

Observation 681c2d0a-2566-4b9d-b959-ba06eb95b302 · outbound

This paper cites A resilient and accessible distribution-preserving watermark for large language models,.

Character-Level Perturbations Disrupt LLM Watermarks A resilient and accessible distribution-preserving watermark for large language models,

Reference 22

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:51.012068Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:51.012068Z digest=sha256:e87f74cf4fd4bbfa95029b2ee6f5eea3632325df6cd9734ad3faac477be16cd2

Observation 074e755d-8d82-4cfc-9609-5b9462d03de3 · outbound

This paper cites Scalable watermarking for identifying large language model outputs,.

Character-Level Perturbations Disrupt LLM Watermarks Scalable watermarking for identifying large language model outputs,

Reference 23

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:51.120204Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:51.120204Z digest=sha256:149ad661995f3ae09e4a4aef15f9d824273fad8d9666611850968128ed96e5b2

Observation 219bb5de-11c5-4d2e-a0ab-b65e2e9f7158 · outbound

This paper cites Robust distortion-free watermarks for language models,.

Character-Level Perturbations Disrupt LLM Watermarks Robust distortion-free watermarks for language models,

Reference 24

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:51.280380Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:51.280380Z digest=sha256:43207d01409143b944720c4eefcb5329f4f0ed8ab192c26b17123280bce976f8

Observation 5a130255-fa94-4c60-aada-778758f4a513 · outbound

This paper cites Undetectable watermarks for language models,.

Character-Level Perturbations Disrupt LLM Watermarks Undetectable watermarks for language models,

Reference 25

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:51.472649Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:51.472649Z digest=sha256:9a69f1e37c4250cca0cc40a8fe9ca67f5f2e50f936df9380c1a1659cbf9c8aef

Observation 711f4715-12be-4419-ae98-4a1b7e30a767 · outbound

This paper cites Bimark: Unbiased multilayer watermarking for large language models,.

Character-Level Perturbations Disrupt LLM Watermarks Bimark: Unbiased multilayer watermarking for large language models,

Reference 26

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:51.475398Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:51.475398Z digest=sha256:ba4ac0726cd4ddd7028bf24f90fa4e09ea31a829146464b5e3d3d101c468b09b

Observation d96a3aa7-4cf8-4296-b2e5-c40baf2907a1 · outbound

This paper cites A Certified Robust Watermark For Large Language Models.

Character-Level Perturbations Disrupt LLM Watermarks A Certified Robust Watermark For Large Language Models

Reference 27

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:51.478031Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:51.478031Z digest=sha256:2228890a0f961e270295ba1f1d5630ae4695d9bfc12f9ea7b3406643f265869b

Observation 375488aa-3132-453d-8623-a8c37b759485 · outbound

This paper cites Bypassing LLM watermarks with color- aware substitutions,.

Character-Level Perturbations Disrupt LLM Watermarks Bypassing LLM watermarks with color- aware substitutions,

Reference 28

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:51.481037Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:51.481037Z digest=sha256:9f18bda743710c25754e4fe23f10deaf86d08862bbba01f92858cccbfa6934dc

Observation 6a8047f6-5637-484d-860f-005adf515442 · outbound

This paper cites b 4: A black-box scrubbing attack on LLM watermarks,.

Character-Level Perturbations Disrupt LLM Watermarks b 4: A black-box scrubbing attack on LLM watermarks,

Reference 29

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:51.483600Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:51.483600Z digest=sha256:88eb42dd10aafaa4fb44303e5813cf0ad81e1daf62aa5126c862da583eab8e51

Observation 2e6c8b32-61c5-48a6-86b2-fb5f686054e0 · outbound

This paper cites De-mark: Watermark removal in large language models,.

Character-Level Perturbations Disrupt LLM Watermarks De-mark: Watermark removal in large language models,

Reference 30

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:51.486079Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:51.486079Z digest=sha256:20a307b75bcf423530dc9080ec88b36ca9a404996ac73da3ef72a3040cccdc19

Observation 01dcd123-91e0-498c-b77f-1eee60e2b138 · outbound

This paper cites Watermark Smoothing Attacks against Language Models.

Character-Level Perturbations Disrupt LLM Watermarks Watermark Smoothing Attacks against Language Models

Reference 31

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:51.488748Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:51.488748Z digest=sha256:0ca90a09de2ba2cf72cee125ce2b0541f1f6ee388761b4249c2fe31fd820c1c5

Observation b47e50ba-84ee-4318-81ef-6f983f7a5180 · outbound

This paper cites Paraphrasing evades detectors of ai-generated text, but retrieval is an effective defense,.

Character-Level Perturbations Disrupt LLM Watermarks Paraphrasing evades detectors of ai-generated text, but retrieval is an effective defense,

Reference 32

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:51.491415Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:51.491415Z digest=sha256:5849939d739ebc7b1c48b567a9bc9d3202c79aba64d1ac4a04a532e6133f2c46

Observation 170903a3-188e-463e-b5f2-3ed59e5dcd1e · outbound

This paper cites On the reliability of watermarks for large language models,.

Character-Level Perturbations Disrupt LLM Watermarks On the reliability of watermarks for large language models,

Reference 33

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:51.493900Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:51.493900Z digest=sha256:33025b89b5a5b13bdd78939e0142d46fa0ce72a7745ede099172a8a74550de07

Observation 2bac9422-7bc1-44a2-a67e-2918d54d90a1 · outbound

This paper cites Markmywords: Analyzing and evaluating language model watermarks,.

Character-Level Perturbations Disrupt LLM Watermarks Markmywords: Analyzing and evaluating language model watermarks,

Reference 34

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:51.496467Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:51.496467Z digest=sha256:594d52cb42d7fe57969abb2ff90d78959dd029c184df7fd7c13bd3e13177e0a3

Observation d78e126a-9892-4403-baef-81335802e8ef · outbound

This paper cites Textbugger: Generating adversarial text against real-world applications,.

Character-Level Perturbations Disrupt LLM Watermarks Textbugger: Generating adversarial text against real-world applications,

Reference 35

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:51.498900Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:51.498900Z digest=sha256:6609c5506effa5d1cb4800462cdf5d717e62214016947d006d58828126c5a396

Observation ab842ec1-e927-44b5-b1b1-6832a794a607 · outbound

This paper cites Textattack: A framework for adversarial attacks, data augmentation, and adversarial training in nlp,.

Character-Level Perturbations Disrupt LLM Watermarks Textattack: A framework for adversarial attacks, data augmentation, and adversarial training in nlp,

Reference 36

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:51.501431Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:51.501431Z digest=sha256:a5a1e267dee9f2111797f72feb81dcdbb96e75baf388c770c6af7c97666d5e85

Observation 6656c59e-9302-4c0c-a6cb-e3934b8040d7 · outbound

This paper cites Black-box generation of adversarial text sequences to evade deep learning classifiers,.

Character-Level Perturbations Disrupt LLM Watermarks Black-box generation of adversarial text sequences to evade deep learning classifiers,

Reference 37

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:51.503983Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:51.503983Z digest=sha256:8953a35626579abfa620ce12da7a639758afebd0a60657ce555bd60d356bdbc9

Observation d3bcf567-a4fc-46af-be4b-6aa044c64693 · outbound

This paper cites Exploring Gradient-Guided Masked Language Model to Detect Textual Adversarial Attacks.

Character-Level Perturbations Disrupt LLM Watermarks Exploring Gradient-Guided Masked Language Model to Detect Textual Adversarial Attacks

Reference 38

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:51.506675Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:51.506675Z digest=sha256:075f5fdc55280b21853aa75a1bca4625cca8d68cc65a3af1da0be4d8b9d73afd

Observation 95f0f9bc-0bf2-42c1-beab-257e035e8796 · outbound

This paper cites Masked language model based textual adversarial example detection,.

Character-Level Perturbations Disrupt LLM Watermarks Masked language model based textual adversarial example detection,

Reference 39

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:51.509818Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:51.509818Z digest=sha256:4daf074e5ca17b8036d7c64d8c4a7a65dc8aad2d1c3844549f2cdb975d14fc58

Observation 97c9dea4-216b-488f-9676-6b630a7290d5 · outbound

This paper cites Watermark stealing in large language models,.

Character-Level Perturbations Disrupt LLM Watermarks Watermark stealing in large language models,

Reference 40

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:51.512236Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:51.512236Z digest=sha256:ddf21c93e5bf211ed03d54dfc53f74b01ea4dd9f1cd5f5f9af2be828959929cd

Observation d655e9cd-ac77-41a0-a642-16ad44da3855 · outbound

This paper cites Stealing watermarks of large language models via mixed integer programming,.

Character-Level Perturbations Disrupt LLM Watermarks Stealing watermarks of large language models via mixed integer programming,

Reference 41

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:51.514650Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:51.514650Z digest=sha256:bdddf692562a5875626186be1e23f63523d7cc8bb466b3c7d3a3c4b8ebc93bc2

Observation 761aaf7b-3953-4a74-995b-dea8f5b81598 · outbound

This paper cites Can watermarks survive translation? on the cross-lingual consistency of text watermark for large language models,.

Character-Level Perturbations Disrupt LLM Watermarks Can watermarks survive translation? on the cross-lingual consistency of text watermark for large language models,

Reference 42

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:51.517041Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:51.517041Z digest=sha256:7b4f29fe04058bd0b21ef9d1340980743e4b234e3625d96b3b3a194c8b53a563

Observation a9f7d773-9aae-4b4c-a6a9-a8e97877789a · outbound

This paper cites On Evaluating The Performance of Watermarked Machine-Generated Texts Under Adversarial Attacks.

Character-Level Perturbations Disrupt LLM Watermarks On Evaluating The Performance of Watermarked Machine-Generated Texts Under Adversarial Attacks

Reference 43

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:51.519469Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:51.519469Z digest=sha256:ec0a6918f9628ad02a4aa8ae921104a2bf2c2bea5385a426ef3b8e055141c7d8

Observation f3ff928d-3c0c-4544-bc3b-eb3e2a033914 · outbound

This paper cites Silverspeak: Evading ai-generated text detectors using homoglyphs,.

Character-Level Perturbations Disrupt LLM Watermarks Silverspeak: Evading ai-generated text detectors using homoglyphs,

Reference 44

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:51.522573Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:51.522573Z digest=sha256:6959c067cdbf290d4b672cbba11386fa6f9f04742df4c7e61fec4d6f23ee3e76

Observation 83e67408-48f4-47d0-9c06-5f3d00c9a010 · outbound

This paper cites Watermarks in the sand: impossibility of strong watermarking for language models,.

Character-Level Perturbations Disrupt LLM Watermarks Watermarks in the sand: impossibility of strong watermarking for language models,

Reference 45

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:51.525081Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:51.525081Z digest=sha256:5d3f43646d0b1527df311697217799a25de23de56d5a4b9fb25f562f333c3282

Observation 446f6627-c982-4311-a849-1648856c03e0 · outbound

This paper cites Watermark under fire: A robustness evaluation of llm watermarking,.

Character-Level Perturbations Disrupt LLM Watermarks Watermark under fire: A robustness evaluation of llm watermarking,

Reference 46

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:51.527481Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:51.527481Z digest=sha256:9d28ec17024108b0a6d6c95145e0553016444e34632a56dc53947be81c273e9a

Observation 82c4f5a0-2b51-4e6b-835b-e0196476444f · outbound

This paper cites Sslguard: A watermarking scheme for self-supervised learning pre-trained encoders,.

Character-Level Perturbations Disrupt LLM Watermarks Sslguard: A watermarking scheme for self-supervised learning pre-trained encoders,

Reference 47

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:51.529999Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:51.529999Z digest=sha256:5bc229e07e12bbe09a52ca90edd916ee043b49f2a1f518c0e681be261e569b22

Observation 7ba6361f-37c2-4ab9-861b-aa5a11034f7d · outbound

This paper cites Entangled watermarks as a defense against model extraction,.

Character-Level Perturbations Disrupt LLM Watermarks Entangled watermarks as a defense against model extraction,

Reference 48

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:51.532316Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:51.532316Z digest=sha256:9b059a1334f07f83104bd3985cfc3d86a75c1505ae50809962a42ef7a6ce7bff

Observation a518a146-2387-42d3-ad09-49313477f8c5 · outbound

This paper cites Exploring the limits of transfer learning with a unified text-to-text transformer,.

Character-Level Perturbations Disrupt LLM Watermarks Exploring the limits of transfer learning with a unified text-to-text transformer,

Reference 49

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:51.534766Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:51.534766Z digest=sha256:01b405f9c3ba9c2971587abbc4e6b33531df49638c78a567f3246ff15835f716

Observation 2c7283d7-325b-49e1-ac60-945dc8da4060 · outbound

This paper cites Synthid.

Character-Level Perturbations Disrupt LLM Watermarks Synthid

Reference 50

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:51.537247Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:51.537247Z digest=sha256:4f22505a090d7b6d8fc494cdb9033c43d6203f7de8a22164ad9b2106aa1c68d8

Observation 7c481b3a-6f21-4141-8a4a-20099744aeca · outbound

This paper cites Terms of use,.

Character-Level Perturbations Disrupt LLM Watermarks Terms of use,

Reference 51

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:51.539643Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:51.539643Z digest=sha256:d360f18fd952728a3ece568e22f0bb5f27f7219f9af5c911ba500d99653bbf2a

Observation 888b75bd-7e67-4ff7-a710-539909486d53 · outbound

This paper cites Optimizing adaptive attacks against content watermarks for language models,.

Character-Level Perturbations Disrupt LLM Watermarks Optimizing adaptive attacks against content watermarks for language models,

Reference 52

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:51.542218Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:51.542218Z digest=sha256:a943bef3163b82f0d25450e6bf15bb9fabca1e8a0509a689cb4d5864d18d272b

Observation 532e6623-8cfb-4399-8b10-9d69ce010d5c · outbound

This paper cites Markllm: An open-source toolkit for llm watermarking,.

Character-Level Perturbations Disrupt LLM Watermarks Markllm: An open-source toolkit for llm watermarking,

Reference 53

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:51.544695Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:51.544695Z digest=sha256:e2795b911fcaf715c7dd52b639ed5427e703b636dbcffb6fe70b84d58b23d6c8

Observation 5ebde10f-8818-4b65-9628-7e3fc2812608 · outbound

This paper cites Software Framework for Topic Modelling with Large Corpora,.

Character-Level Perturbations Disrupt LLM Watermarks Software Framework for Topic Modelling with Large Corpora,

Reference 54

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:51.547241Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:51.547241Z digest=sha256:439bcea66d55d114291e9eec53c9cb725ad258f0bac8bf7578ad378c83ce77d5

Observation 8079ca2f-7778-4935-8656-362c6ccf748a · outbound

This paper cites AuthorMist: Evading AI Text Detectors with Reinforcement Learning.

Character-Level Perturbations Disrupt LLM Watermarks AuthorMist: Evading AI Text Detectors with Reinforcement Learning

Reference 55

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:51.549738Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:51.549738Z digest=sha256:740f448f1502c4cb7baebc285c2b0ac91daca65d22e45f9b758bb2ea4e29246d

Observation 17d1b733-e8c0-4662-88c5-e027750bdcd4 · outbound

This paper cites Bleu: a method for automatic evaluation of machine translation,.

Character-Level Perturbations Disrupt LLM Watermarks Bleu: a method for automatic evaluation of machine translation,

Reference 56

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:51.552722Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:51.552722Z digest=sha256:c10d4550af2efcdc3309539ccd90b012560bb54b91a5f975c220908dc3463a76

Observation ad71345a-99b2-4dda-a860-b192500809ba · outbound

This paper cites Rouge: A package for automatic evaluation of summaries,.

Character-Level Perturbations Disrupt LLM Watermarks Rouge: A package for automatic evaluation of summaries,

Reference 57

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:51.555135Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:51.555135Z digest=sha256:415e05ee570eac2f501ad3ea5bbc8e2c61e8905fb837c1fa14040cfb31f2137d

Observation c9135b88-33aa-44c1-9676-f03f0eb886ba · outbound

This paper cites The cefr levels.

Character-Level Perturbations Disrupt LLM Watermarks The cefr levels

Reference 58

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:51.557552Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:51.557552Z digest=sha256:3fb3f9f8df65f794edf71b47711d1b8d58a9ae61c12b1a7c7489fd93fd2eef55

Observation 2ded87d2-d40f-494a-a90e-7e672deb6a0b · outbound

This paper cites No free lunch in LLM watermarking: Trade-offs in watermarking design choices,.

Character-Level Perturbations Disrupt LLM Watermarks No free lunch in LLM watermarking: Trade-offs in watermarking design choices,

Reference 59

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:51.560050Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:51.560050Z digest=sha256:a2bbc7922c50abe6bab6b7dae4c1324ad76a433a1ee6a823b6674d5111f494bf

Observation 36368584-233b-4e00-9b85-40d1fc8c28aa · outbound

This paper cites New ai classifier for indicating ai-written tex,.

Character-Level Perturbations Disrupt LLM Watermarks New ai classifier for indicating ai-written tex,

Reference 60

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:51.562553Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:51.562553Z digest=sha256:9741afc21aaf22dcbc301e056d22200e0606db9977b725e9c491f819f9258cae

Observation ac015a89-3fbc-4f7b-8369-27e998cde758 · outbound

This paper cites Ai detector by grammarly.

Character-Level Perturbations Disrupt LLM Watermarks Ai detector by grammarly

Reference 61

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:51.565140Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:51.565140Z digest=sha256:383da8f48a2bd7d0e05b2d66644ceb663b8fada0091e54b4cbdcf78e27a5070d

Observation d492b1c6-5759-4b8c-9aef-ca60198a7e40 · outbound

This paper cites Gptzero’s ai detection technology.

Character-Level Perturbations Disrupt LLM Watermarks Gptzero’s ai detection technology

Reference 62

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:51.567775Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:51.567775Z digest=sha256:d5c9c92bd53c61422250f4b0d5e019d3f644f7496a8dd0d8dbf239ba64f55dae

Observation bd70620d-e1db-403e-8409-964d3466b614 · outbound

This paper cites Bert: Pre-training of deep bidirectional transformers for language understanding,.

Character-Level Perturbations Disrupt LLM Watermarks Bert: Pre-training of deep bidirectional transformers for language understanding,

Reference 63

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:51.570265Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:51.570265Z digest=sha256:8460efe3f21ad5f1fedbf56e8116c9795a867ac7afc12ae428d82dcdce46d2c6

Observation 1852bfb4-a84b-401e-843f-68f7227f0ebf · outbound

This paper cites Languagetool.

Character-Level Perturbations Disrupt LLM Watermarks Languagetool

Reference 64

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:51.572662Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:51.572662Z digest=sha256:a1121cf60b1a767861fe8004ccf95b71b8a7ac09375c28856e165e94d5e90e84

Observation 6635be85-c3ec-4b7c-b9f1-e6027b16a80e · outbound

This paper cites Python tesseract.

Character-Level Perturbations Disrupt LLM Watermarks Python tesseract

Reference 65

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:51.575026Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:51.575026Z digest=sha256:5f47f8441c5465f403aae4933d022c437aea41854db52b8eb9f8ada62650897d

Observation 94603794-456f-49da-ae57-f6817e1f2a8d · outbound

This paper cites Unicodedata.

Character-Level Perturbations Disrupt LLM Watermarks Unicodedata

Reference 66

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:51.577525Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:51.577525Z digest=sha256:8d0204ca557fc1e76e9dd062e14e7e04b667bff93e26aa89c515ceb13c408b2a

Observation 27693111-82a8-4098-bf69-763669810bde · outbound

This paper cites Results are reported forn= 5,10, and15, using both token- level and character-level perturbations across five watermark- ing schemes.

Character-Level Perturbations Disrupt LLM Watermarks Results are reported forn= 5,10, and15, using both token- level and character-level perturbations across five watermark- ing schemes

Reference 67

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:51.580631Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:51.580631Z digest=sha256:5b0049e64075f219e91bcd75835252f82e92586609d16bcdb3d856ea64950480

Observation 11a52c92-b1d3-4a3b-8614-fd49f5be26b2 · outbound

This paper cites We compare both token-level (dashed lines) and character-level (solid lines) perturbations.

Character-Level Perturbations Disrupt LLM Watermarks We compare both token-level (dashed lines) and character-level (solid lines) perturbations

Reference 68

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:51.583360Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:51.583360Z digest=sha256:097cf467c812a52bf0aa18294a2530b431c3214b48b3206b2377a2fcbfc5f549

Observation 5b3f3546-5755-4d2d-8d3a-d65d2fbb1f25 · outbound

This paper cites As introduced TABLE XV: Performance of reference detectors with three levels of data augmentation across five watermark schemes.

Character-Level Perturbations Disrupt LLM Watermarks As introduced TABLE XV: Performance of reference detectors with three levels of data augmentation across five watermark schemes

Reference 69

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:51.586020Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:51.586020Z digest=sha256:a725f35a04de41016dc8f7a89a9e8c198c4ea5a3885002d6d894ec0bdd76130b

Observation 3a20e059-ac93-4eb6-958c-611393b97e47 · outbound

This paper cites Major Revision.

Character-Level Perturbations Disrupt LLM Watermarks Major Revision

Reference 70

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:51.588729Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:51.588729Z digest=sha256:6f623fbcac4d9d8d3eac60e9673967c60f39ae60da4e0b1d43060f1809a4eea0

Observation 1b166493-c74c-4c53-9781-266e1cd21bfc · outbound

This paper cites We recom- mend downloading the code using the following command: git clone https://github.com/plll4zzx/CharacterRemoval4WM.

Character-Level Perturbations Disrupt LLM Watermarks We recom- mend downloading the code using the following command: git clone https://github.com/plll4zzx/CharacterRemoval4WM

Reference 71

Resolution
verified exact
doi, observed 2026-08-04T19:49:01.231791Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-08-04T19:46:51.591359Z digest=sha256:290ed08f396c1e0154800bef0c1322d1d9111557f483fd413f23deef1408a934

Observation 61a40ad6-0521-4c50-9d3e-e998b30e21ea · outbound

This paper cites an unresolved cited work.

Character-Level Perturbations Disrupt LLM Watermarks Unresolved cited work

Reference 72

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:51.594038Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:51.594038Z digest=sha256:86fb2322c7edf73281498e9d32e787fc9bb38d6a6f61b2f6d68b5aa440622d02

Observation be7ba321-042e-441d-8d9f-2a6d5dd1cb3d · outbound

This paper cites an unresolved cited work.

Character-Level Perturbations Disrupt LLM Watermarks Unresolved cited work

Reference 73

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:51.596929Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:51.596929Z digest=sha256:30daa345cab43864baa3e57a675fd67a85042e4d59ca2864207f35202c6a819a

Observation 602d3fd1-93ae-49ac-9d77-b6519a501039 · outbound

This paper cites real- newslike/*.

Character-Level Perturbations Disrupt LLM Watermarks real- newslike/*

Reference 74

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:51.599453Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:51.599453Z digest=sha256:7f51a2fe7b3ea58a05f7c1a77c97bb34b45c85c87bb0d6abc8e4b42bb0040e85

Observation 5c90de35-de9d-4060-8c8b-694dcd33c20b · outbound

This paper cites /../dataset/c4/realnewslike.

Character-Level Perturbations Disrupt LLM Watermarks /../dataset/c4/realnewslike

Reference 75

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:51.602058Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:51.602058Z digest=sha256:1c44959191321ccfb66eb71fa2c16bc622c2cd37906a3aabc4e710ebad22aa84

Observation 0dc88317-ae32-4354-b1ec-0980abe5b17e · outbound

This paper cites KGW" --num_epochs 15 \ --rand_char_rate 0.15 --rand_times 9 \ --llm_name.

Character-Level Perturbations Disrupt LLM Watermarks KGW" --num_epochs 15 \ --rand_char_rate 0.15 --rand_times 9 \ --llm_name

Reference 76

Resolution
unresolved
no resolver link, observed 2026-08-04T19:46:51.604848Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T19:46:51.604848Z digest=sha256:45bd1f2bd9bb890edc72588a512d009b40cb4d76355e0499b628ce913e7680fd

Pith citing papers

Observation 2ab31816-21f1-4680-ae47-4be4ff3b9c28 · inbound

DP-NCB: Privacy Preserving Fair Bandits cites this paper.

DP-NCB: Privacy Preserving Fair Bandits Character-Level Perturbations Disrupt LLM Watermarks

Reference 44

Resolution
verified exact
local_arxiv, observed 2026-08-06T04:16:07.155446Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

source=pdf_text observed=2026-08-06T04:16:06.800914Z digest=sha256:683e7055ab77730d824f2108d351a6863de120d0b4c0cb1bf483383e7366a83c