{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:YLGS4XJAXQHHDG46UEMFLBWGD5","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1e995e4314068cf9b48af98aef89ac8b2d462a4dd34442c5bf066bcd158ec0b9","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-05-02T06:51:11Z","title_canon_sha256":"bd8f2fad95f3750d840f881c32a320dfa6de74658661a3f317d143ca32bbca07"},"schema_version":"1.0","source":{"id":"2505.01050","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.01050","created_at":"2026-07-05T10:57:44Z"},{"alias_kind":"arxiv_version","alias_value":"2505.01050v1","created_at":"2026-07-05T10:57:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.01050","created_at":"2026-07-05T10:57:44Z"},{"alias_kind":"pith_short_12","alias_value":"YLGS4XJAXQHH","created_at":"2026-07-05T10:57:44Z"},{"alias_kind":"pith_short_16","alias_value":"YLGS4XJAXQHHDG46","created_at":"2026-07-05T10:57:44Z"},{"alias_kind":"pith_short_8","alias_value":"YLGS4XJA","created_at":"2026-07-05T10:57:44Z"}],"graph_snapshots":[{"event_id":"sha256:66f9b734961e592fc68b0ba5836a91d92e8d57f89f6d878a8452650606ae9f38","target":"graph","created_at":"2026-07-05T10:57:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2505.01050/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Vision Large Language Models (VLLMs) are increasingly deployed to offer advanced capabilities on inputs comprising both text and images. While prior research has shown that adversarial attacks can transfer from open-source to proprietary black-box models in text-only and vision-only contexts, the extent and effectiveness of such vulnerabilities remain underexplored for VLLMs. We present a comprehensive analysis demonstrating that targeted adversarial examples are highly transferable to widely-used proprietary VLLMs such as GPT-4o, Claude, and Gemini. We show that attackers can craft perturbati","authors_text":"Alexander Robey, Andy Zou, Chengming Xu, Haoqi Hu, Kai Hu, Li Zhang, Matt Fredrikson, Weichen Yu","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-05-02T06:51:11Z","title":"Transferable Adversarial Attacks on Black-Box Vision-Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.01050","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:205ce25f92636af0fa58c5f247f8f02531cffdcf4cbf5f5c3a2da111675d8a23","target":"record","created_at":"2026-07-05T10:57:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1e995e4314068cf9b48af98aef89ac8b2d462a4dd34442c5bf066bcd158ec0b9","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-05-02T06:51:11Z","title_canon_sha256":"bd8f2fad95f3750d840f881c32a320dfa6de74658661a3f317d143ca32bbca07"},"schema_version":"1.0","source":{"id":"2505.01050","kind":"arxiv","version":1}},"canonical_sha256":"c2cd2e5d20bc0e719b9ea1185586c61f5bab74ad05db3a1b50a828eef3a8effd","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"c2cd2e5d20bc0e719b9ea1185586c61f5bab74ad05db3a1b50a828eef3a8effd","first_computed_at":"2026-07-05T10:57:44.207067Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:57:44.207067Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"SMujT7RL0WPrjfegbqghA+6aLUlBcm4jPNbTAl6hvUfS8FTdilcd89J+sqpIU55XbDPbjcz6HU6LgjfeeSbcAg==","signature_status":"signed_v1","signed_at":"2026-07-05T10:57:44.207742Z","signed_message":"canonical_sha256_bytes"},"source_id":"2505.01050","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:205ce25f92636af0fa58c5f247f8f02531cffdcf4cbf5f5c3a2da111675d8a23","sha256:66f9b734961e592fc68b0ba5836a91d92e8d57f89f6d878a8452650606ae9f38"],"state_sha256":"979632505ee3ebdced4d6c3b8e27886f98a7b4b8b187e120092c9760468f462e"}