{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2025:SMCY4J745VKDYVDT2JKOGNOSJO","short_pith_number":"pith:SMCY4J74","schema_version":"1.0","canonical_sha256":"93058e27fced543c5473d254e335d24b92bcc38d8094c6c75da498bdb1947fd6","source":{"kind":"arxiv","id":"2506.06018","version":1},"attestation_state":"computed","paper":{"title":"Optimization-Free Universal Watermark Forgery with Regenerative Diffusion Models","license":"http://creativecommons.org/licenses/by-sa/4.0/","headline":"","cross_cats":["cs.AI","cs.CR"],"primary_cat":"cs.MM","authors_text":"Chaoyi Zhu, Lydia Y. Chen, Pin-Yu Chen, Renyi Yang, Robert Birke, Tsung-Yi Ho, Zaitang Li","submitted_at":"2025-06-06T12:08:02Z","abstract_excerpt":"Watermarking becomes one of the pivotal solutions to trace and verify the origin of synthetic images generated by artificial intelligence models, but it is not free of risks. Recent studies demonstrate the capability to forge watermarks from a target image onto cover images via adversarial optimization without knowledge of the target generative model and watermark schemes. In this paper, we uncover a greater risk of an optimization-free and universal watermark forgery that harnesses existing regenerative diffusion models. Our proposed forgery attack, PnP (Plug-and-Plant), seamlessly extracts a"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2506.06018","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.MM","submitted_at":"2025-06-06T12:08:02Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"251993571728e17cf2141950c308e4272735f2e70084f0698839c454b6f63274","abstract_canon_sha256":"df925abcbb0c83c9a56c628384115b5e0e2077681cf6c4a4220fb60108f0a9be"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:17:14.687413Z","signature_b64":"Et8jdzamiiP5+S8K6B+IvOKRbs6X0NkNyrGaR2XtOMSqh6B5b66rOlsjLfGTBNN8P/QEkBiCJ1sNvPDEQjvVAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"93058e27fced543c5473d254e335d24b92bcc38d8094c6c75da498bdb1947fd6","last_reissued_at":"2026-07-05T11:17:14.686795Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:17:14.686795Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Optimization-Free Universal Watermark Forgery with Regenerative Diffusion Models","license":"http://creativecommons.org/licenses/by-sa/4.0/","headline":"","cross_cats":["cs.AI","cs.CR"],"primary_cat":"cs.MM","authors_text":"Chaoyi Zhu, Lydia Y. Chen, Pin-Yu Chen, Renyi Yang, Robert Birke, Tsung-Yi Ho, Zaitang Li","submitted_at":"2025-06-06T12:08:02Z","abstract_excerpt":"Watermarking becomes one of the pivotal solutions to trace and verify the origin of synthetic images generated by artificial intelligence models, but it is not free of risks. Recent studies demonstrate the capability to forge watermarks from a target image onto cover images via adversarial optimization without knowledge of the target generative model and watermark schemes. In this paper, we uncover a greater risk of an optimization-free and universal watermark forgery that harnesses existing regenerative diffusion models. Our proposed forgery attack, PnP (Plug-and-Plant), seamlessly extracts a"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.06018","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2506.06018/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2506.06018","created_at":"2026-07-05T11:17:14.686865+00:00"},{"alias_kind":"arxiv_version","alias_value":"2506.06018v1","created_at":"2026-07-05T11:17:14.686865+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.06018","created_at":"2026-07-05T11:17:14.686865+00:00"},{"alias_kind":"pith_short_12","alias_value":"SMCY4J745VKD","created_at":"2026-07-05T11:17:14.686865+00:00"},{"alias_kind":"pith_short_16","alias_value":"SMCY4J745VKDYVDT","created_at":"2026-07-05T11:17:14.686865+00:00"},{"alias_kind":"pith_short_8","alias_value":"SMCY4J74","created_at":"2026-07-05T11:17:14.686865+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":1,"internal_anchor_count":0,"sample":[{"citing_arxiv_id":"2606.29807","citing_title":"Rethinking Forgery Attacks on Semantic Watermarks in Black-Box Settings: A Geometric Distortion Perspective","ref_index":31,"is_internal_anchor":false}]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/SMCY4J745VKDYVDT2JKOGNOSJO","json":"https://pith.science/pith/SMCY4J745VKDYVDT2JKOGNOSJO.json","graph_json":"https://pith.science/api/pith-number/SMCY4J745VKDYVDT2JKOGNOSJO/graph.json","events_json":"https://pith.science/api/pith-number/SMCY4J745VKDYVDT2JKOGNOSJO/events.json","paper":"https://pith.science/paper/SMCY4J74"},"agent_actions":{"view_html":"https://pith.science/pith/SMCY4J745VKDYVDT2JKOGNOSJO","download_json":"https://pith.science/pith/SMCY4J745VKDYVDT2JKOGNOSJO.json","view_paper":"https://pith.science/paper/SMCY4J74","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2506.06018&json=true","fetch_graph":"https://pith.science/api/pith-number/SMCY4J745VKDYVDT2JKOGNOSJO/graph.json","fetch_events":"https://pith.science/api/pith-number/SMCY4J745VKDYVDT2JKOGNOSJO/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/SMCY4J745VKDYVDT2JKOGNOSJO/action/timestamp_anchor","attest_storage":"https://pith.science/pith/SMCY4J745VKDYVDT2JKOGNOSJO/action/storage_attestation","attest_author":"https://pith.science/pith/SMCY4J745VKDYVDT2JKOGNOSJO/action/author_attestation","sign_citation":"https://pith.science/pith/SMCY4J745VKDYVDT2JKOGNOSJO/action/citation_signature","submit_replication":"https://pith.science/pith/SMCY4J745VKDYVDT2JKOGNOSJO/action/replication_record"}},"created_at":"2026-07-05T11:17:14.686865+00:00","updated_at":"2026-07-05T11:17:14.686865+00:00"}