{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:AOP4ZK2T77MSZ2MQ777CNUBUDB","short_pith_number":"pith:AOP4ZK2T","canonical_record":{"source":{"id":"2510.10271","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-10-11T16:14:56Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"b6a01f141c56721e46d380ce51286236df2ca92d01d10de43f9735aab49bc8dd","abstract_canon_sha256":"be2399af9304277cdaecb475448cbbdcccc997e88ba78945aef97f8ef547294d"},"schema_version":"1.0"},"canonical_sha256":"039fccab53ffd92ce990fffe26d03418601b8e9612e51767ad49d643bdd87fff","source":{"kind":"arxiv","id":"2510.10271","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2510.10271","created_at":"2026-06-29T00:14:00Z"},{"alias_kind":"arxiv_version","alias_value":"2510.10271v2","created_at":"2026-06-29T00:14:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2510.10271","created_at":"2026-06-29T00:14:00Z"},{"alias_kind":"pith_short_12","alias_value":"AOP4ZK2T77MS","created_at":"2026-06-29T00:14:00Z"},{"alias_kind":"pith_short_16","alias_value":"AOP4ZK2T77MSZ2MQ","created_at":"2026-06-29T00:14:00Z"},{"alias_kind":"pith_short_8","alias_value":"AOP4ZK2T","created_at":"2026-06-29T00:14:00Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:AOP4ZK2T77MSZ2MQ777CNUBUDB","target":"record","payload":{"canonical_record":{"source":{"id":"2510.10271","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-10-11T16:14:56Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"b6a01f141c56721e46d380ce51286236df2ca92d01d10de43f9735aab49bc8dd","abstract_canon_sha256":"be2399af9304277cdaecb475448cbbdcccc997e88ba78945aef97f8ef547294d"},"schema_version":"1.0"},"canonical_sha256":"039fccab53ffd92ce990fffe26d03418601b8e9612e51767ad49d643bdd87fff","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-06-29T00:14:00.480899Z","signature_b64":"ax09nGERlGChOK4u7Tn9kSdOylvZY1OfiP09MSVk30LoS9QrSyHP02ryj6IJBbkvtpiXLF61JfiaYdbpngwuBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"039fccab53ffd92ce990fffe26d03418601b8e9612e51767ad49d643bdd87fff","last_reissued_at":"2026-06-29T00:14:00.480467Z","signature_status":"signed_v1","first_computed_at":"2026-06-29T00:14:00.480467Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2510.10271","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-29T00:14:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vYNq24yNVZkWtcODjl4u3DCRyLU47+w03w7OjM6ZhjMqgFnpMYC4ALwS2v+GlbcZsU5FxEVLyLUmdiuFkZppCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T19:26:34.431300Z"},"content_sha256":"620a0aa0fe34366ca3e2478dd7343d9122b571e35cbc994612d79c61e6fef4bd","schema_version":"1.0","event_id":"sha256:620a0aa0fe34366ca3e2478dd7343d9122b571e35cbc994612d79c61e6fef4bd"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:AOP4ZK2T77MSZ2MQ777CNUBUDB","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Le Guan, Wei Niu, Wentian Zhu, Zhen Xiang","submitted_at":"2025-10-11T16:14:56Z","abstract_excerpt":"Unlike regular tokens derived from existing text corpora, special tokens are artificially created to annotate structured conversations during the fine-tuning process of Large Language Models (LLMs). Serving as metadata of training data, these tokens play a crucial role in instructing LLMs to generate coherent and context-aware responses. We demonstrate that special tokens can be exploited to construct four attack primitives, with which malicious users can reliably bypass the internal safety alignment of online LLM services and circumvent state-of-the-art (SOTA) external content moderation syst"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2510.10271","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2510.10271/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-29T00:14:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"KUHW+rdkjmlDM3SGAOflu4mrmdFZ3lbvRlBsPq4t8zULPtAvl7LDeiUBNyT56hXkgDFxTVHQensI+sHl5jAHBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T19:26:34.431795Z"},"content_sha256":"0008f2899ed30ef49e674898ec3a99c431900db722018c2730766169932f17ea","schema_version":"1.0","event_id":"sha256:0008f2899ed30ef49e674898ec3a99c431900db722018c2730766169932f17ea"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/AOP4ZK2T77MSZ2MQ777CNUBUDB/bundle.json","state_url":"https://pith.science/pith/AOP4ZK2T77MSZ2MQ777CNUBUDB/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/AOP4ZK2T77MSZ2MQ777CNUBUDB/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T19:26:34Z","links":{"resolver":"https://pith.science/pith/AOP4ZK2T77MSZ2MQ777CNUBUDB","bundle":"https://pith.science/pith/AOP4ZK2T77MSZ2MQ777CNUBUDB/bundle.json","state":"https://pith.science/pith/AOP4ZK2T77MSZ2MQ777CNUBUDB/state.json","well_known_bundle":"https://pith.science/.well-known/pith/AOP4ZK2T77MSZ2MQ777CNUBUDB/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:AOP4ZK2T77MSZ2MQ777CNUBUDB","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"be2399af9304277cdaecb475448cbbdcccc997e88ba78945aef97f8ef547294d","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-10-11T16:14:56Z","title_canon_sha256":"b6a01f141c56721e46d380ce51286236df2ca92d01d10de43f9735aab49bc8dd"},"schema_version":"1.0","source":{"id":"2510.10271","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2510.10271","created_at":"2026-06-29T00:14:00Z"},{"alias_kind":"arxiv_version","alias_value":"2510.10271v2","created_at":"2026-06-29T00:14:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2510.10271","created_at":"2026-06-29T00:14:00Z"},{"alias_kind":"pith_short_12","alias_value":"AOP4ZK2T77MS","created_at":"2026-06-29T00:14:00Z"},{"alias_kind":"pith_short_16","alias_value":"AOP4ZK2T77MSZ2MQ","created_at":"2026-06-29T00:14:00Z"},{"alias_kind":"pith_short_8","alias_value":"AOP4ZK2T","created_at":"2026-06-29T00:14:00Z"}],"graph_snapshots":[{"event_id":"sha256:0008f2899ed30ef49e674898ec3a99c431900db722018c2730766169932f17ea","target":"graph","created_at":"2026-06-29T00:14:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2510.10271/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Unlike regular tokens derived from existing text corpora, special tokens are artificially created to annotate structured conversations during the fine-tuning process of Large Language Models (LLMs). Serving as metadata of training data, these tokens play a crucial role in instructing LLMs to generate coherent and context-aware responses. We demonstrate that special tokens can be exploited to construct four attack primitives, with which malicious users can reliably bypass the internal safety alignment of online LLM services and circumvent state-of-the-art (SOTA) external content moderation syst","authors_text":"Le Guan, Wei Niu, Wentian Zhu, Zhen Xiang","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2510.10271","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:620a0aa0fe34366ca3e2478dd7343d9122b571e35cbc994612d79c61e6fef4bd","target":"record","created_at":"2026-06-29T00:14:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"be2399af9304277cdaecb475448cbbdcccc997e88ba78945aef97f8ef547294d","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-10-11T16:14:56Z","title_canon_sha256":"b6a01f141c56721e46d380ce51286236df2ca92d01d10de43f9735aab49bc8dd"},"schema_version":"1.0","source":{"id":"2510.10271","kind":"arxiv","version":2}},"canonical_sha256":"039fccab53ffd92ce990fffe26d03418601b8e9612e51767ad49d643bdd87fff","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"039fccab53ffd92ce990fffe26d03418601b8e9612e51767ad49d643bdd87fff","first_computed_at":"2026-06-29T00:14:00.480467Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-06-29T00:14:00.480467Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ax09nGERlGChOK4u7Tn9kSdOylvZY1OfiP09MSVk30LoS9QrSyHP02ryj6IJBbkvtpiXLF61JfiaYdbpngwuBQ==","signature_status":"signed_v1","signed_at":"2026-06-29T00:14:00.480899Z","signed_message":"canonical_sha256_bytes"},"source_id":"2510.10271","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:620a0aa0fe34366ca3e2478dd7343d9122b571e35cbc994612d79c61e6fef4bd","sha256:0008f2899ed30ef49e674898ec3a99c431900db722018c2730766169932f17ea"],"state_sha256":"9b009e0ae231cff4efb6c4fe49a5b43b6af0c00fa8e5e4730ea69c1d3a175a19"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"yqCoUkUdraODtRfd0L+bqPl447tQl7SNWHtm7kY9HuI0eFYNDQI9GaXubVpD/z+Cvm07i08Pzceu0THyzHLnDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T19:26:34.435568Z","bundle_sha256":"8255655175012f0ce15457fd242a98b03a83fb1289566b2f427cc32e4b1921dd"}}