{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:WMYZTTZICQDR54AYZFSTER4HDM","short_pith_number":"pith:WMYZTTZI","canonical_record":{"source":{"id":"2502.14529","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-02-20T13:02:00Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"34a9bbbb2409b949a8a2480b543387076cb201d229648594588aa08e73c3a3a6","abstract_canon_sha256":"1d80290f1806f061f6f433c285ea6bfbaba102a0678cbc6e0c4ad6f7d6f547fa"},"schema_version":"1.0"},"canonical_sha256":"b33199cf2814071ef018c9653247871b321ea35666ed0bc75f01f355817b8dce","source":{"kind":"arxiv","id":"2502.14529","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.14529","created_at":"2026-07-05T10:17:28Z"},{"alias_kind":"arxiv_version","alias_value":"2502.14529v1","created_at":"2026-07-05T10:17:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.14529","created_at":"2026-07-05T10:17:28Z"},{"alias_kind":"pith_short_12","alias_value":"WMYZTTZICQDR","created_at":"2026-07-05T10:17:28Z"},{"alias_kind":"pith_short_16","alias_value":"WMYZTTZICQDR54AY","created_at":"2026-07-05T10:17:28Z"},{"alias_kind":"pith_short_8","alias_value":"WMYZTTZI","created_at":"2026-07-05T10:17:28Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:WMYZTTZICQDR54AYZFSTER4HDM","target":"record","payload":{"canonical_record":{"source":{"id":"2502.14529","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-02-20T13:02:00Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"34a9bbbb2409b949a8a2480b543387076cb201d229648594588aa08e73c3a3a6","abstract_canon_sha256":"1d80290f1806f061f6f433c285ea6bfbaba102a0678cbc6e0c4ad6f7d6f547fa"},"schema_version":"1.0"},"canonical_sha256":"b33199cf2814071ef018c9653247871b321ea35666ed0bc75f01f355817b8dce","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:17:28.284945Z","signature_b64":"4kEygDPSMfp9TdGNf7hewgnjRMWdeMt0Zv4JwJaRq4ODqhbgp3tph0Kth27rFvceN+KxHroT3L/Vi3psKX7KDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b33199cf2814071ef018c9653247871b321ea35666ed0bc75f01f355817b8dce","last_reissued_at":"2026-07-05T10:17:28.284534Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:17:28.284534Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2502.14529","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:17:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"eG4z7lLJzANMJpWE/ORQMrFVctkD7NGmYtuzhWcVEFzJUuELQeQwoXpzEEdfv1Lx131VfKySrmDH9XmEXnvyBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-10T22:02:24.987854Z"},"content_sha256":"2fb2871b2cd1cb5a6119ad3360b3316d1ac6d0ba3ff2e75a1b313e2ffb482ded","schema_version":"1.0","event_id":"sha256:2fb2871b2cd1cb5a6119ad3360b3316d1ac6d0ba3ff2e75a1b313e2ffb482ded"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:WMYZTTZICQDR54AYZFSTER4HDM","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"CORBA: Contagious Recursive Blocking Attacks on Multi-Agent Systems Based on Large Language Models","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CL","authors_text":"Jie Zhang, Kun Wang, Qing Guo, Yang Liu, Yuanhe Zhang, Zhenhong Zhou, Zherui Li","submitted_at":"2025-02-20T13:02:00Z","abstract_excerpt":"Large Language Model-based Multi-Agent Systems (LLM-MASs) have demonstrated remarkable real-world capabilities, effectively collaborating to complete complex tasks. While these systems are designed with safety mechanisms, such as rejecting harmful instructions through alignment, their security remains largely unexplored. This gap leaves LLM-MASs vulnerable to targeted disruptions. In this paper, we introduce Contagious Recursive Blocking Attacks (Corba), a novel and simple yet highly effective attack that disrupts interactions between agents within an LLM-MAS. Corba leverages two key propertie"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.14529","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2502.14529/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:17:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"NaS4bAgBX9a3/GdfkMjmHrzMDnji9oG7DtqnhBdCml0T9O5vvH79ZZ8KdsTktOaPkY1w6Y/eUxsVn5cZJGM4AA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-10T22:02:24.988512Z"},"content_sha256":"00939bf4e4e2aa37f857d1952ef147c162011b22aab6f269afd3c7e00a0b2000","schema_version":"1.0","event_id":"sha256:00939bf4e4e2aa37f857d1952ef147c162011b22aab6f269afd3c7e00a0b2000"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/WMYZTTZICQDR54AYZFSTER4HDM/bundle.json","state_url":"https://pith.science/pith/WMYZTTZICQDR54AYZFSTER4HDM/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/WMYZTTZICQDR54AYZFSTER4HDM/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-10T22:02:24Z","links":{"resolver":"https://pith.science/pith/WMYZTTZICQDR54AYZFSTER4HDM","bundle":"https://pith.science/pith/WMYZTTZICQDR54AYZFSTER4HDM/bundle.json","state":"https://pith.science/pith/WMYZTTZICQDR54AYZFSTER4HDM/state.json","well_known_bundle":"https://pith.science/.well-known/pith/WMYZTTZICQDR54AYZFSTER4HDM/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:WMYZTTZICQDR54AYZFSTER4HDM","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1d80290f1806f061f6f433c285ea6bfbaba102a0678cbc6e0c4ad6f7d6f547fa","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-02-20T13:02:00Z","title_canon_sha256":"34a9bbbb2409b949a8a2480b543387076cb201d229648594588aa08e73c3a3a6"},"schema_version":"1.0","source":{"id":"2502.14529","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.14529","created_at":"2026-07-05T10:17:28Z"},{"alias_kind":"arxiv_version","alias_value":"2502.14529v1","created_at":"2026-07-05T10:17:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.14529","created_at":"2026-07-05T10:17:28Z"},{"alias_kind":"pith_short_12","alias_value":"WMYZTTZICQDR","created_at":"2026-07-05T10:17:28Z"},{"alias_kind":"pith_short_16","alias_value":"WMYZTTZICQDR54AY","created_at":"2026-07-05T10:17:28Z"},{"alias_kind":"pith_short_8","alias_value":"WMYZTTZI","created_at":"2026-07-05T10:17:28Z"}],"graph_snapshots":[{"event_id":"sha256:00939bf4e4e2aa37f857d1952ef147c162011b22aab6f269afd3c7e00a0b2000","target":"graph","created_at":"2026-07-05T10:17:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2502.14529/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large Language Model-based Multi-Agent Systems (LLM-MASs) have demonstrated remarkable real-world capabilities, effectively collaborating to complete complex tasks. While these systems are designed with safety mechanisms, such as rejecting harmful instructions through alignment, their security remains largely unexplored. This gap leaves LLM-MASs vulnerable to targeted disruptions. In this paper, we introduce Contagious Recursive Blocking Attacks (Corba), a novel and simple yet highly effective attack that disrupts interactions between agents within an LLM-MAS. Corba leverages two key propertie","authors_text":"Jie Zhang, Kun Wang, Qing Guo, Yang Liu, Yuanhe Zhang, Zhenhong Zhou, Zherui Li","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-02-20T13:02:00Z","title":"CORBA: Contagious Recursive Blocking Attacks on Multi-Agent Systems Based on Large Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.14529","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:2fb2871b2cd1cb5a6119ad3360b3316d1ac6d0ba3ff2e75a1b313e2ffb482ded","target":"record","created_at":"2026-07-05T10:17:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1d80290f1806f061f6f433c285ea6bfbaba102a0678cbc6e0c4ad6f7d6f547fa","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-02-20T13:02:00Z","title_canon_sha256":"34a9bbbb2409b949a8a2480b543387076cb201d229648594588aa08e73c3a3a6"},"schema_version":"1.0","source":{"id":"2502.14529","kind":"arxiv","version":1}},"canonical_sha256":"b33199cf2814071ef018c9653247871b321ea35666ed0bc75f01f355817b8dce","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b33199cf2814071ef018c9653247871b321ea35666ed0bc75f01f355817b8dce","first_computed_at":"2026-07-05T10:17:28.284534Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:17:28.284534Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"4kEygDPSMfp9TdGNf7hewgnjRMWdeMt0Zv4JwJaRq4ODqhbgp3tph0Kth27rFvceN+KxHroT3L/Vi3psKX7KDw==","signature_status":"signed_v1","signed_at":"2026-07-05T10:17:28.284945Z","signed_message":"canonical_sha256_bytes"},"source_id":"2502.14529","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:2fb2871b2cd1cb5a6119ad3360b3316d1ac6d0ba3ff2e75a1b313e2ffb482ded","sha256:00939bf4e4e2aa37f857d1952ef147c162011b22aab6f269afd3c7e00a0b2000"],"state_sha256":"05893e3602c9150e9313a394ff37727a8e5842175a3a2d8df0bb494d05b49854"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zIwnGyvOhHU9lFzPRRhswV+xwejihKnctQCsmj4DklzORNA53ymvOX4JKkQ/oKbXXUYtHLrw5b8tuQzT0zCKCQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-10T22:02:24.992525Z","bundle_sha256":"a52910d8760a5ef630b06e5fca33d7eaa72231026d1c2fd58166a2d65e762381"}}