{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:RJ6TBSBTVIDGOLFZGC6EPHQQTR","short_pith_number":"pith:RJ6TBSBT","canonical_record":{"source":{"id":"2507.16773","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-07-22T17:21:36Z","cross_cats_sorted":[],"title_canon_sha256":"55c6c09df0785badd262e2a69b40fe5a0a34e957a982ccc48c644480f209d003","abstract_canon_sha256":"0bcac93607b12e8725ab0a6f08d7c49e6e1bd8c17f10cf4afc58304bef6b5616"},"schema_version":"1.0"},"canonical_sha256":"8a7d30c833aa06672cb930bc479e109c658dd233f4612d3f85f02566f8423cb9","source":{"kind":"arxiv","id":"2507.16773","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.16773","created_at":"2026-07-05T11:41:30Z"},{"alias_kind":"arxiv_version","alias_value":"2507.16773v1","created_at":"2026-07-05T11:41:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.16773","created_at":"2026-07-05T11:41:30Z"},{"alias_kind":"pith_short_12","alias_value":"RJ6TBSBTVIDG","created_at":"2026-07-05T11:41:30Z"},{"alias_kind":"pith_short_16","alias_value":"RJ6TBSBTVIDGOLFZ","created_at":"2026-07-05T11:41:30Z"},{"alias_kind":"pith_short_8","alias_value":"RJ6TBSBT","created_at":"2026-07-05T11:41:30Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:RJ6TBSBTVIDGOLFZGC6EPHQQTR","target":"record","payload":{"canonical_record":{"source":{"id":"2507.16773","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-07-22T17:21:36Z","cross_cats_sorted":[],"title_canon_sha256":"55c6c09df0785badd262e2a69b40fe5a0a34e957a982ccc48c644480f209d003","abstract_canon_sha256":"0bcac93607b12e8725ab0a6f08d7c49e6e1bd8c17f10cf4afc58304bef6b5616"},"schema_version":"1.0"},"canonical_sha256":"8a7d30c833aa06672cb930bc479e109c658dd233f4612d3f85f02566f8423cb9","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:41:30.861204Z","signature_b64":"Cbt9/t1W/LGpgi85khyrj8dFB1wSoQqV5xIpehJhaF20XOZvm4tw7JElYaLVWfbyhCbfCPOn8HtG2fD66N8ACg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"8a7d30c833aa06672cb930bc479e109c658dd233f4612d3f85f02566f8423cb9","last_reissued_at":"2026-07-05T11:41:30.860701Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:41:30.860701Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2507.16773","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:41:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Vv7L6dQC4nZ/s3WKXeRGsxnZUPfr1xfbXTaM6xYHRoBaD9RsEYyvAVn/PAGoG0Uf1R9hz3nyXqFMEKpxozLvBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T01:56:09.712759Z"},"content_sha256":"2d8f22427b8a493f861d98eb3e56a0fa6069dc1f3c44eb647ab9a6b217d1e51f","schema_version":"1.0","event_id":"sha256:2d8f22427b8a493f861d98eb3e56a0fa6069dc1f3c44eb647ab9a6b217d1e51f"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:RJ6TBSBTVIDGOLFZGC6EPHQQTR","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"When LLMs Copy to Think: Uncovering Copy-Guided Attacks in Reasoning LLMs","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Fengyuan Xu, Hao Wu, Sheng Zhong, Xiao Li, Xiuzhen Cheng, Yue Li, Yue Zhang","submitted_at":"2025-07-22T17:21:36Z","abstract_excerpt":"Large Language Models (LLMs) have become integral to automated code analysis, enabling tasks such as vulnerability detection and code comprehension. However, their integration introduces novel attack surfaces. In this paper, we identify and investigate a new class of prompt-based attacks, termed Copy-Guided Attacks (CGA), which exploit the inherent copying tendencies of reasoning-capable LLMs. By injecting carefully crafted triggers into external code snippets, adversaries can induce the model to replicate malicious content during inference. This behavior enables two classes of vulnerabilities"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.16773","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2507.16773/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:41:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3GNJ5GO5AMKFMj3gFMFKeckmQ/WUMF9nRKIsSTRMzP7VNwoSBYp/ixbMQeJRua3BESb85hiHwYWbgU6jGeLABg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T01:56:09.713289Z"},"content_sha256":"8daa5e3104f187026e1b97ac0d0f183662742890410961d71e41be285a780e30","schema_version":"1.0","event_id":"sha256:8daa5e3104f187026e1b97ac0d0f183662742890410961d71e41be285a780e30"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/RJ6TBSBTVIDGOLFZGC6EPHQQTR/bundle.json","state_url":"https://pith.science/pith/RJ6TBSBTVIDGOLFZGC6EPHQQTR/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/RJ6TBSBTVIDGOLFZGC6EPHQQTR/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T01:56:09Z","links":{"resolver":"https://pith.science/pith/RJ6TBSBTVIDGOLFZGC6EPHQQTR","bundle":"https://pith.science/pith/RJ6TBSBTVIDGOLFZGC6EPHQQTR/bundle.json","state":"https://pith.science/pith/RJ6TBSBTVIDGOLFZGC6EPHQQTR/state.json","well_known_bundle":"https://pith.science/.well-known/pith/RJ6TBSBTVIDGOLFZGC6EPHQQTR/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:RJ6TBSBTVIDGOLFZGC6EPHQQTR","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"0bcac93607b12e8725ab0a6f08d7c49e6e1bd8c17f10cf4afc58304bef6b5616","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-07-22T17:21:36Z","title_canon_sha256":"55c6c09df0785badd262e2a69b40fe5a0a34e957a982ccc48c644480f209d003"},"schema_version":"1.0","source":{"id":"2507.16773","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.16773","created_at":"2026-07-05T11:41:30Z"},{"alias_kind":"arxiv_version","alias_value":"2507.16773v1","created_at":"2026-07-05T11:41:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.16773","created_at":"2026-07-05T11:41:30Z"},{"alias_kind":"pith_short_12","alias_value":"RJ6TBSBTVIDG","created_at":"2026-07-05T11:41:30Z"},{"alias_kind":"pith_short_16","alias_value":"RJ6TBSBTVIDGOLFZ","created_at":"2026-07-05T11:41:30Z"},{"alias_kind":"pith_short_8","alias_value":"RJ6TBSBT","created_at":"2026-07-05T11:41:30Z"}],"graph_snapshots":[{"event_id":"sha256:8daa5e3104f187026e1b97ac0d0f183662742890410961d71e41be285a780e30","target":"graph","created_at":"2026-07-05T11:41:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2507.16773/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large Language Models (LLMs) have become integral to automated code analysis, enabling tasks such as vulnerability detection and code comprehension. However, their integration introduces novel attack surfaces. In this paper, we identify and investigate a new class of prompt-based attacks, termed Copy-Guided Attacks (CGA), which exploit the inherent copying tendencies of reasoning-capable LLMs. By injecting carefully crafted triggers into external code snippets, adversaries can induce the model to replicate malicious content during inference. This behavior enables two classes of vulnerabilities","authors_text":"Fengyuan Xu, Hao Wu, Sheng Zhong, Xiao Li, Xiuzhen Cheng, Yue Li, Yue Zhang","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-07-22T17:21:36Z","title":"When LLMs Copy to Think: Uncovering Copy-Guided Attacks in Reasoning LLMs"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.16773","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:2d8f22427b8a493f861d98eb3e56a0fa6069dc1f3c44eb647ab9a6b217d1e51f","target":"record","created_at":"2026-07-05T11:41:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"0bcac93607b12e8725ab0a6f08d7c49e6e1bd8c17f10cf4afc58304bef6b5616","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-07-22T17:21:36Z","title_canon_sha256":"55c6c09df0785badd262e2a69b40fe5a0a34e957a982ccc48c644480f209d003"},"schema_version":"1.0","source":{"id":"2507.16773","kind":"arxiv","version":1}},"canonical_sha256":"8a7d30c833aa06672cb930bc479e109c658dd233f4612d3f85f02566f8423cb9","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"8a7d30c833aa06672cb930bc479e109c658dd233f4612d3f85f02566f8423cb9","first_computed_at":"2026-07-05T11:41:30.860701Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:41:30.860701Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Cbt9/t1W/LGpgi85khyrj8dFB1wSoQqV5xIpehJhaF20XOZvm4tw7JElYaLVWfbyhCbfCPOn8HtG2fD66N8ACg==","signature_status":"signed_v1","signed_at":"2026-07-05T11:41:30.861204Z","signed_message":"canonical_sha256_bytes"},"source_id":"2507.16773","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:2d8f22427b8a493f861d98eb3e56a0fa6069dc1f3c44eb647ab9a6b217d1e51f","sha256:8daa5e3104f187026e1b97ac0d0f183662742890410961d71e41be285a780e30"],"state_sha256":"01e04ea8d6ef099f81274d04ce0047b3589940f3d5165e337e73fd6d94416bb5"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"juG6V5b7dg4JHD33qUytrcIYA9O/ejo/gifEkHpZ1BCCkq3fHlWFedogAnMg9l4ij1R+UAQn45166kqdTaTHDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T01:56:09.718760Z","bundle_sha256":"a31d1b1b3efd9fcab136d4a3c7b2d844f96da5bed071be1ed1985efd9bf2e93e"}}