{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:4H3VUBAIQ3HTH76LLVEPQ6Q636","short_pith_number":"pith:4H3VUBAI","canonical_record":{"source":{"id":"2411.16167","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-11-25T07:46:57Z","cross_cats_sorted":[],"title_canon_sha256":"69757f0e912d586b6549c2d2e0c12430bc805a1248e65b74476de42510942bba","abstract_canon_sha256":"81f16e966cb4d6d92d8a56d96a100d63e96dc7f364d3f1d91bfa9ddc4656cb16"},"schema_version":"1.0"},"canonical_sha256":"e1f75a040886cf33ffcb5d48f87a1edf8e617e05847c943158801591b9700735","source":{"kind":"arxiv","id":"2411.16167","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2411.16167","created_at":"2026-07-05T11:33:17Z"},{"alias_kind":"arxiv_version","alias_value":"2411.16167v3","created_at":"2026-07-05T11:33:17Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2411.16167","created_at":"2026-07-05T11:33:17Z"},{"alias_kind":"pith_short_12","alias_value":"4H3VUBAIQ3HT","created_at":"2026-07-05T11:33:17Z"},{"alias_kind":"pith_short_16","alias_value":"4H3VUBAIQ3HTH76L","created_at":"2026-07-05T11:33:17Z"},{"alias_kind":"pith_short_8","alias_value":"4H3VUBAI","created_at":"2026-07-05T11:33:17Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:4H3VUBAIQ3HTH76LLVEPQ6Q636","target":"record","payload":{"canonical_record":{"source":{"id":"2411.16167","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-11-25T07:46:57Z","cross_cats_sorted":[],"title_canon_sha256":"69757f0e912d586b6549c2d2e0c12430bc805a1248e65b74476de42510942bba","abstract_canon_sha256":"81f16e966cb4d6d92d8a56d96a100d63e96dc7f364d3f1d91bfa9ddc4656cb16"},"schema_version":"1.0"},"canonical_sha256":"e1f75a040886cf33ffcb5d48f87a1edf8e617e05847c943158801591b9700735","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:33:17.724330Z","signature_b64":"sKMaRVgwTuyEyAen67g3iiTdeaf47zLE2lWzSfiP8OtLYieSFVFWIefOrOAA8xn6ijUs0hdnZv8c84t+z2oFCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e1f75a040886cf33ffcb5d48f87a1edf8e617e05847c943158801591b9700735","last_reissued_at":"2026-07-05T11:33:17.723860Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:33:17.723860Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2411.16167","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:33:17Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"X3YjCRYOxP5IYhoczyy0+f7c772NlkAmnU5mmSu9rKMpeL024e5mwkoecQw36yqRX/jltU34EBtOeNNoS7flBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-21T04:23:35.272843Z"},"content_sha256":"274744083095c76fa895cba2b897abaeb24e1d1393d09a4fc6dd6db2c46077f9","schema_version":"1.0","event_id":"sha256:274744083095c76fa895cba2b897abaeb24e1d1393d09a4fc6dd6db2c46077f9"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:4H3VUBAIQ3HTH76LLVEPQ6Q636","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Mind the Cost of Scaffold! Benign Clients May Even Become Accomplices of Backdoor Attack","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.LG","authors_text":"Haozhao Wang, Jason Zeng, Michael Heinrich, Ming Wu, Shengmin Xu, Shen Ren, Tianwei Zhang, Xiang Lan, Xingshuo Han, Xuanye Zhang","submitted_at":"2024-11-25T07:46:57Z","abstract_excerpt":"By using a control variate to calibrate the local gradient of each client, Scaffold has been widely known as a powerful solution to mitigate the impact of data heterogeneity in Federated Learning. Although Scaffold achieves significant performance improvements, we show that this superiority is at the cost of increased security vulnerabilities. Specifically, this paper presents BadSFL, the first backdoor attack targeting Scaffold, which turns benign clients into accomplices to amplify the attack effect. The core idea of BadSFL is to uniquely tamper with the control variate to subtly steer benig"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2411.16167","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2411.16167/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:33:17Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"4JcZJclCeq+WYRVJx0cPC7Ly1SCM1Dy2dTe8NYb5ROcfgSoP6GhoT6k3ECDb3eFaA84UTtYFVQ4H2Ayi8FtjAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-21T04:23:35.273209Z"},"content_sha256":"0515a6c6c0cddec419c1343b3fa792b0a23c38d287680ab71c99771bd77bca07","schema_version":"1.0","event_id":"sha256:0515a6c6c0cddec419c1343b3fa792b0a23c38d287680ab71c99771bd77bca07"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/4H3VUBAIQ3HTH76LLVEPQ6Q636/bundle.json","state_url":"https://pith.science/pith/4H3VUBAIQ3HTH76LLVEPQ6Q636/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/4H3VUBAIQ3HTH76LLVEPQ6Q636/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-21T04:23:35Z","links":{"resolver":"https://pith.science/pith/4H3VUBAIQ3HTH76LLVEPQ6Q636","bundle":"https://pith.science/pith/4H3VUBAIQ3HTH76LLVEPQ6Q636/bundle.json","state":"https://pith.science/pith/4H3VUBAIQ3HTH76LLVEPQ6Q636/state.json","well_known_bundle":"https://pith.science/.well-known/pith/4H3VUBAIQ3HTH76LLVEPQ6Q636/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:4H3VUBAIQ3HTH76LLVEPQ6Q636","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"81f16e966cb4d6d92d8a56d96a100d63e96dc7f364d3f1d91bfa9ddc4656cb16","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-11-25T07:46:57Z","title_canon_sha256":"69757f0e912d586b6549c2d2e0c12430bc805a1248e65b74476de42510942bba"},"schema_version":"1.0","source":{"id":"2411.16167","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2411.16167","created_at":"2026-07-05T11:33:17Z"},{"alias_kind":"arxiv_version","alias_value":"2411.16167v3","created_at":"2026-07-05T11:33:17Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2411.16167","created_at":"2026-07-05T11:33:17Z"},{"alias_kind":"pith_short_12","alias_value":"4H3VUBAIQ3HT","created_at":"2026-07-05T11:33:17Z"},{"alias_kind":"pith_short_16","alias_value":"4H3VUBAIQ3HTH76L","created_at":"2026-07-05T11:33:17Z"},{"alias_kind":"pith_short_8","alias_value":"4H3VUBAI","created_at":"2026-07-05T11:33:17Z"}],"graph_snapshots":[{"event_id":"sha256:0515a6c6c0cddec419c1343b3fa792b0a23c38d287680ab71c99771bd77bca07","target":"graph","created_at":"2026-07-05T11:33:17Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2411.16167/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"By using a control variate to calibrate the local gradient of each client, Scaffold has been widely known as a powerful solution to mitigate the impact of data heterogeneity in Federated Learning. Although Scaffold achieves significant performance improvements, we show that this superiority is at the cost of increased security vulnerabilities. Specifically, this paper presents BadSFL, the first backdoor attack targeting Scaffold, which turns benign clients into accomplices to amplify the attack effect. The core idea of BadSFL is to uniquely tamper with the control variate to subtly steer benig","authors_text":"Haozhao Wang, Jason Zeng, Michael Heinrich, Ming Wu, Shengmin Xu, Shen Ren, Tianwei Zhang, Xiang Lan, Xingshuo Han, Xuanye Zhang","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-11-25T07:46:57Z","title":"Mind the Cost of Scaffold! Benign Clients May Even Become Accomplices of Backdoor Attack"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2411.16167","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:274744083095c76fa895cba2b897abaeb24e1d1393d09a4fc6dd6db2c46077f9","target":"record","created_at":"2026-07-05T11:33:17Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"81f16e966cb4d6d92d8a56d96a100d63e96dc7f364d3f1d91bfa9ddc4656cb16","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-11-25T07:46:57Z","title_canon_sha256":"69757f0e912d586b6549c2d2e0c12430bc805a1248e65b74476de42510942bba"},"schema_version":"1.0","source":{"id":"2411.16167","kind":"arxiv","version":3}},"canonical_sha256":"e1f75a040886cf33ffcb5d48f87a1edf8e617e05847c943158801591b9700735","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e1f75a040886cf33ffcb5d48f87a1edf8e617e05847c943158801591b9700735","first_computed_at":"2026-07-05T11:33:17.723860Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:33:17.723860Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"sKMaRVgwTuyEyAen67g3iiTdeaf47zLE2lWzSfiP8OtLYieSFVFWIefOrOAA8xn6ijUs0hdnZv8c84t+z2oFCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T11:33:17.724330Z","signed_message":"canonical_sha256_bytes"},"source_id":"2411.16167","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:274744083095c76fa895cba2b897abaeb24e1d1393d09a4fc6dd6db2c46077f9","sha256:0515a6c6c0cddec419c1343b3fa792b0a23c38d287680ab71c99771bd77bca07"],"state_sha256":"cf44b1122e9d38154a6e6508a27d292a9983c52b91bcc581fae5a04b315d0af0"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"L5W6Y5cUs8nNwzWNnFpPdAvTu1igT76nY1qSUGYBcTsStlHCKo2R+4NiOUZlN1Sks6RJnPTjaP1pEe6Mb8uzAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-21T04:23:35.275715Z","bundle_sha256":"fcef2c4d23bdce36967f8660bb6791034d390033f5293b173ff1e139e10865f3"}}