{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:B74QDN6PCWTDL6XRSCLDXJLHLY","short_pith_number":"pith:B74QDN6P","canonical_record":{"source":{"id":"2506.07590","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-06-09T09:36:31Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"6b0660a4661a40ae887f40e0e39b59ec5198e6c04a321a462847785620476b2a","abstract_canon_sha256":"3db12919f80932903a5bf0b8e930e762e1ca5e41ff97b9f5f7cad58ab3f53164"},"schema_version":"1.0"},"canonical_sha256":"0ff901b7cf15a635faf190963ba5675e2df8a7985d86e45a2f2bbe214b736064","source":{"kind":"arxiv","id":"2506.07590","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.07590","created_at":"2026-07-05T11:18:29Z"},{"alias_kind":"arxiv_version","alias_value":"2506.07590v1","created_at":"2026-07-05T11:18:29Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.07590","created_at":"2026-07-05T11:18:29Z"},{"alias_kind":"pith_short_12","alias_value":"B74QDN6PCWTD","created_at":"2026-07-05T11:18:29Z"},{"alias_kind":"pith_short_16","alias_value":"B74QDN6PCWTDL6XR","created_at":"2026-07-05T11:18:29Z"},{"alias_kind":"pith_short_8","alias_value":"B74QDN6P","created_at":"2026-07-05T11:18:29Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:B74QDN6PCWTDL6XRSCLDXJLHLY","target":"record","payload":{"canonical_record":{"source":{"id":"2506.07590","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-06-09T09:36:31Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"6b0660a4661a40ae887f40e0e39b59ec5198e6c04a321a462847785620476b2a","abstract_canon_sha256":"3db12919f80932903a5bf0b8e930e762e1ca5e41ff97b9f5f7cad58ab3f53164"},"schema_version":"1.0"},"canonical_sha256":"0ff901b7cf15a635faf190963ba5675e2df8a7985d86e45a2f2bbe214b736064","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:18:29.926033Z","signature_b64":"W2cT6rb8V5P2mafo0kQ/+/z+ykff9gHR4QsnA0N4uPG33Yj9QWOXntouyqrHn8iJowMgg9cJ5VyvMvj6r21lAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"0ff901b7cf15a635faf190963ba5675e2df8a7985d86e45a2f2bbe214b736064","last_reissued_at":"2026-07-05T11:18:29.925599Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:18:29.925599Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2506.07590","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:18:29Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"QuXUX0lWSRvOZ+4kZUnLs91cRAG2Pa9LhYHKI0L2H5Go8tzKGWA4x6wmCieCI+1njoSFyK4MUV+S/Zqhc/wGDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T22:37:29.689896Z"},"content_sha256":"735281b0282d4d5e8c81c89598bf234a3e14d8fd5aba7ed1ed13cf8d6fcc5dbf","schema_version":"1.0","event_id":"sha256:735281b0282d4d5e8c81c89598bf234a3e14d8fd5aba7ed1ed13cf8d6fcc5dbf"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:B74QDN6PCWTDL6XRSCLDXJLHLY","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Explore the vulnerability of black-box models via diffusion models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CV","authors_text":"Ashley Gao, Huajie Shao, Jiacheng Shi, Yanfu Zhang","submitted_at":"2025-06-09T09:36:31Z","abstract_excerpt":"Recent advancements in diffusion models have enabled high-fidelity and photorealistic image generation across diverse applications. However, these models also present security and privacy risks, including copyright violations, sensitive information leakage, and the creation of harmful or offensive content that could be exploited maliciously. In this study, we uncover a novel security threat where an attacker leverages diffusion model APIs to generate synthetic images, which are then used to train a high-performing substitute model. This enables the attacker to execute model extraction and tran"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.07590","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2506.07590/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:18:29Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ye1tz9Lk5tqVdlbQNIAnyZHRLKxdppTgbioG2xBJRD8c1UNHz53p4TSpb0HCzyPcidJXfmq94QrJNAtDdFCxDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T22:37:29.690730Z"},"content_sha256":"5bf7bc10c1e703863f43b8ad448b027cd0416a7fab5365540ac31a1c959c8067","schema_version":"1.0","event_id":"sha256:5bf7bc10c1e703863f43b8ad448b027cd0416a7fab5365540ac31a1c959c8067"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/B74QDN6PCWTDL6XRSCLDXJLHLY/bundle.json","state_url":"https://pith.science/pith/B74QDN6PCWTDL6XRSCLDXJLHLY/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/B74QDN6PCWTDL6XRSCLDXJLHLY/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T22:37:29Z","links":{"resolver":"https://pith.science/pith/B74QDN6PCWTDL6XRSCLDXJLHLY","bundle":"https://pith.science/pith/B74QDN6PCWTDL6XRSCLDXJLHLY/bundle.json","state":"https://pith.science/pith/B74QDN6PCWTDL6XRSCLDXJLHLY/state.json","well_known_bundle":"https://pith.science/.well-known/pith/B74QDN6PCWTDL6XRSCLDXJLHLY/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:B74QDN6PCWTDL6XRSCLDXJLHLY","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"3db12919f80932903a5bf0b8e930e762e1ca5e41ff97b9f5f7cad58ab3f53164","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-06-09T09:36:31Z","title_canon_sha256":"6b0660a4661a40ae887f40e0e39b59ec5198e6c04a321a462847785620476b2a"},"schema_version":"1.0","source":{"id":"2506.07590","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.07590","created_at":"2026-07-05T11:18:29Z"},{"alias_kind":"arxiv_version","alias_value":"2506.07590v1","created_at":"2026-07-05T11:18:29Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.07590","created_at":"2026-07-05T11:18:29Z"},{"alias_kind":"pith_short_12","alias_value":"B74QDN6PCWTD","created_at":"2026-07-05T11:18:29Z"},{"alias_kind":"pith_short_16","alias_value":"B74QDN6PCWTDL6XR","created_at":"2026-07-05T11:18:29Z"},{"alias_kind":"pith_short_8","alias_value":"B74QDN6P","created_at":"2026-07-05T11:18:29Z"}],"graph_snapshots":[{"event_id":"sha256:5bf7bc10c1e703863f43b8ad448b027cd0416a7fab5365540ac31a1c959c8067","target":"graph","created_at":"2026-07-05T11:18:29Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2506.07590/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recent advancements in diffusion models have enabled high-fidelity and photorealistic image generation across diverse applications. However, these models also present security and privacy risks, including copyright violations, sensitive information leakage, and the creation of harmful or offensive content that could be exploited maliciously. In this study, we uncover a novel security threat where an attacker leverages diffusion model APIs to generate synthetic images, which are then used to train a high-performing substitute model. This enables the attacker to execute model extraction and tran","authors_text":"Ashley Gao, Huajie Shao, Jiacheng Shi, Yanfu Zhang","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.07590","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:735281b0282d4d5e8c81c89598bf234a3e14d8fd5aba7ed1ed13cf8d6fcc5dbf","target":"record","created_at":"2026-07-05T11:18:29Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"3db12919f80932903a5bf0b8e930e762e1ca5e41ff97b9f5f7cad58ab3f53164","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-06-09T09:36:31Z","title_canon_sha256":"6b0660a4661a40ae887f40e0e39b59ec5198e6c04a321a462847785620476b2a"},"schema_version":"1.0","source":{"id":"2506.07590","kind":"arxiv","version":1}},"canonical_sha256":"0ff901b7cf15a635faf190963ba5675e2df8a7985d86e45a2f2bbe214b736064","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"0ff901b7cf15a635faf190963ba5675e2df8a7985d86e45a2f2bbe214b736064","first_computed_at":"2026-07-05T11:18:29.925599Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:18:29.925599Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"W2cT6rb8V5P2mafo0kQ/+/z+ykff9gHR4QsnA0N4uPG33Yj9QWOXntouyqrHn8iJowMgg9cJ5VyvMvj6r21lAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T11:18:29.926033Z","signed_message":"canonical_sha256_bytes"},"source_id":"2506.07590","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:735281b0282d4d5e8c81c89598bf234a3e14d8fd5aba7ed1ed13cf8d6fcc5dbf","sha256:5bf7bc10c1e703863f43b8ad448b027cd0416a7fab5365540ac31a1c959c8067"],"state_sha256":"4e484978759b710e79fa1220da14f6cae96539e84ed0c4404ef456cce57cfa22"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"D6q+IBsNuOQ5Mq8GT9g1QjLxHO21zY721PAbCKsSF9TKNy5bUr5wxXhZvmYcFgneMFkBik0PIEHvmIX2tlBXBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T22:37:29.695136Z","bundle_sha256":"0be3d9c723f447e8f5535c5fa9d9caae3216c79dd7913dc7451bc6274ce86249"}}