{"as_of":"2026-08-09T18:00:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:f9037055a0887470b5bb16f549c6a53bbb26769260ddefed193fe588f228cd67","coverage":[{"denominator":36,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":36,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-08T15:35:36.192526Z","state":"measured"},{"denominator":37,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":37,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-10T18:08:01.503806Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-11T05:26:00.916602Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"cited_work":{"arxiv_id":"2502.06418","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2502.06418","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Robust watermarks leak: Channel-aware feature extraction enables adversarial watermark manipulation.arXiv preprint arXiv:2502.06418","venue":null,"work_id":"2b847398-91bb-4f15-ada6-cf8be8332897","year":null},"citing_paper":{"arxiv_id":"2604.06662","last_updated":"2026-04-08T04:28:56Z","snapshot_observed_at":"2026-07-06T22:55:06.424752Z","submitted_at":"2026-04-08T04:28:56Z","title":"Towards Robust Content Watermarking Against Removal and Forgery Attacks","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-10T18:08:01.503806Z"},"links":{"cited_paper":"/paper/2502.06418","citing_paper":"/paper/2604.06662"},"observation_digest":"sha256:347a56a5915b687fd4de2b1355a54531dcd9bb1dcbe32be9357730d67d57a32c","observation_id":"8fea8e91-117f-4e3c-b32b-8caf88bc128a","resolution":{"observed_at":"2026-05-11T05:26:00.926267Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2502.06418/citation-record","integrity":"/paper/2502.06418/integrity","json":"/paper/2502.06418/citation-record.json","paper":"/paper/2502.06418"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T15:35:36.034946Z","title":"write newline","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.034946Z"},"links":{"citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:8daf0b3f367db8f7735bd2f95f569f8b723375b356394d804136a1e426d4357b","observation_id":"e765546e-fe13-454b-b2be-2fb8b733059e","resolution":{"observed_at":"2026-08-08T15:35:36.034946Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T15:35:37.000876Z","title":"URL https://www.midjourney.com/home","venue":null,"work_id":"11591179-1cf9-4f5e-9f5a-5ce25f2b4347","year":2024},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.041046Z"},"links":{"citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:0aa242175bc94f55ce775c9a6134929b2d7228dc6b9a9824159501fbf3838366","observation_id":"48f13d3d-1314-4367-999b-5529b334b36d","resolution":{"observed_at":"2026-08-08T15:35:37.005432Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T15:35:36.986865Z","title":"URL https://openai.com/sora","venue":null,"work_id":"bf962b5d-49f5-4fbf-9f8c-686e51f68007","year":2024},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.045833Z"},"links":{"citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:8942a88fd013811a011142b3dfcb998d63dcd78608e6d105ec6384f3d631d1a9","observation_id":"3d4560ba-ebb6-4441-9760-196c756048f9","resolution":{"observed_at":"2026-08-08T15:35:36.991299Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T15:35:36.050480Z","title":"and Timofte, R","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.050480Z"},"links":{"citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:1f91287ebfab5a34ba39ffc0c698f3711e3c81d7e000129bcdc3d31a5a67023f","observation_id":"90f0654c-de35-4938-80f4-bb630cd9a700","resolution":{"observed_at":"2026-08-08T15:35:36.050480Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T15:35:36.963000Z","title":"Combined dwt-dct digital image watermarking","venue":null,"work_id":"ed1fbd10-23ed-4dae-aed2-dfa96394cc54","year":2007},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.055433Z"},"links":{"citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:16ca5dca1fb8e7bf16439d4b36d8d502375637d6281f6861b5f304109c837479","observation_id":"f8754f3f-931b-4e78-ae37-ff49fe64bf88","resolution":{"observed_at":"2026-08-08T15:35:36.967617Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.08573","last_updated":"2024-06-07T03:38:35Z","snapshot_observed_at":"2026-08-07T16:54:42.698164Z","submitted_at":"2024-01-16T18:58:36Z","title":"WAVES: Benchmarking the Robustness of Image Watermarks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.08573","snapshot_observed_at":"2026-08-08T15:35:36.060493Z","title":"Benchmarking the robustness of image watermarks","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.060493Z"},"links":{"cited_paper":"/paper/2401.08573","citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:7ab9a5e79cf1a003cbb9ddbba8e406e02454d7a99bab6a1be35953ae0eb04c52","observation_id":"89b1a2f9-7b3b-4bbb-ae00-47646489b496","resolution":{"observed_at":"2026-08-08T15:35:36.060493Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T15:35:36.948480Z","title":"Lsb based digital image watermarking for gray scale image","venue":null,"work_id":"21b1b852-8cdf-4a8b-9935-050e64f6165f","year":2012},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.065444Z"},"links":{"citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:aa2fc38af19d5d379a9decc475efe1a1f2b29017c44247894b89df584e8c7e11","observation_id":"3422e1aa-e33b-448a-9f0c-7a03179aef70","resolution":{"observed_at":"2026-08-08T15:35:36.953186Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T15:35:36.933698Z","title":null,"venue":null,"work_id":"1ae8eeb2-d8e8-4a8f-b092-27a1b2c3365d","year":2024},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.070456Z"},"links":{"citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:93e5a9e919a0e5625e8a45a8fa78af2e516aca7275eee498097b8d003a847fa4","observation_id":"ad54b1f4-ef1c-4832-b3fc-5c9b8a289919","resolution":{"observed_at":"2026-08-08T15:35:36.938650Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T15:35:36.918888Z","title":"PIMoG : An Effective Screen-shooting Noise-Layer Simulation for Deep-Learning-Based Watermarking Network","venue":null,"work_id":"ea0d852e-f7d3-4627-ab55-48ef7c47fe03","year":2022},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.074664Z"},"links":{"citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:9603ce5c069fc9ff77cd2573560cf349821fb859231b5d2c9bb6e7b82a440ede","observation_id":"2c69b05f-b6b6-4680-8cb8-bc65fbdc8915","resolution":{"observed_at":"2026-08-08T15:35:36.923856Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T15:35:36.079000Z","title":"Denoising diffusion probabilistic models","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.079000Z"},"links":{"citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:c1e95e938e0a353d1fa138fe746704735231c0d3ef960efe17cb101dbc3d7bb2","observation_id":"a4220526-3dc4-4ff7-96c1-e71b2bb07a59","resolution":{"observed_at":"2026-08-08T15:35:36.079000Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.15365","last_updated":"2025-02-19T03:50:04Z","snapshot_observed_at":"2026-07-06T17:49:07.589781Z","submitted_at":"2024-03-22T17:33:11Z","title":"A Transfer Attack to Image Watermarks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.15365","snapshot_observed_at":"2026-08-08T15:35:36.083343Z","title":"A transfer attack to image watermarks","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.083343Z"},"links":{"cited_paper":"/paper/2403.15365","citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:4f301cea82c407b284a06d05e9b2b35dcaa4f4c925920d1a2e0a2aa5728df6e5","observation_id":"1350d812-6500-4186-ade2-7e5699586532","resolution":{"observed_at":"2026-08-08T15:35:36.083343Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T15:35:36.894543Z","title":null,"venue":null,"work_id":"b35e6a0a-4133-4155-b63a-79ffa1c43364","year":2017},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.088174Z"},"links":{"citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:57e4c73637800ff4898c032d3bc89bacec6f8e225b253d1b3f56e6845fffe873","observation_id":"f6569a48-ce03-4526-b1b9-8e5258ce4579","resolution":{"observed_at":"2026-08-08T15:35:36.899098Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T15:35:36.880422Z","title":null,"venue":null,"work_id":"f7186829-22d3-4278-bb8d-cc84984fd46a","year":2023},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.092676Z"},"links":{"citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:22a05db2d5de5e87e65f5b648eb86dc3336362848eba626617e10f4d789cad86","observation_id":"061f1ad0-3926-4f20-8139-8b79ab2adc25","resolution":{"observed_at":"2026-08-08T15:35:36.884859Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T15:35:36.096899Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.096899Z"},"links":{"citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:1318912ec8b229c11d9d7bede06f15d0d9bed003e3b56c5f3154995e1ad93d36","observation_id":"f5fa9d88-8c82-4d09-8664-ed91f7cc1302","resolution":{"observed_at":"2026-08-08T15:35:36.096899Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.08363","last_updated":"2024-11-22T17:56:26Z","snapshot_observed_at":"2026-07-06T18:13:59.779068Z","submitted_at":"2024-05-14T07:05:18Z","title":"UnMarker: A Universal Attack on Defensive Image Watermarking","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.08363","snapshot_observed_at":"2026-08-08T15:35:36.101173Z","title":"and Hengartner, U","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.101173Z"},"links":{"cited_paper":"/paper/2405.08363","citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:eac0f428c84b5427d1851e8439f3018fcc245122d95593238e8f1b7fde45f818","observation_id":"684fab97-5436-4dca-b749-5fa41940b8a9","resolution":{"observed_at":"2026-08-08T15:35:36.101173Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T15:35:36.866398Z","title":null,"venue":null,"work_id":"7d60480e-881a-4f41-b744-ab7b18bdc8f2","year":2024},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.105854Z"},"links":{"citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:9329531c1dba2606da1e0eb1917ca227f33b1276d581749045bb96b29ea66012","observation_id":"91563b53-13af-402a-b64d-f51826f48920","resolution":{"observed_at":"2026-08-08T15:35:36.870878Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T15:35:36.852031Z","title":"V., and Herrigel, A","venue":null,"work_id":"6874af3f-536f-428e-8c23-bf88d2a143fe","year":2000},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.110082Z"},"links":{"citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:22f7d83ebe21cbfcaf9e360493a77de857ff402cd445b0659a559dab0658ee49","observation_id":"13ebcc12-d07b-45cf-a850-406671f25718","resolution":{"observed_at":"2026-08-08T15:35:36.856497Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T15:35:36.114178Z","title":null,"venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.114178Z"},"links":{"citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:1d9c1d6a2720f3792b8cd2c7d937bc73d46427fd8349719a5ba956e724ebc52e","observation_id":"a5acee96-e8dc-4aeb-b54a-4c37cde2fe7b","resolution":{"observed_at":"2026-08-08T15:35:36.114178Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T15:35:36.118470Z","title":"A novel two-stage separable deep learning framework for practical blind watermarking","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.118470Z"},"links":{"citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:b5681da6f8ffb40addb9f2e33649da4534401f00d5373663d0ad280744787d48","observation_id":"471cb493-da70-4905-8ef6-ee7968e88185","resolution":{"observed_at":"2026-08-08T15:35:36.118470Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1711.05101","last_updated":"2019-01-04T21:01:49Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2017-11-14T14:24:06Z","title":"Decoupled Weight Decay Regularization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1711.05101","snapshot_observed_at":"2026-08-08T15:35:36.122737Z","title":"Decoupled weight decay regularization","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.122737Z"},"links":{"cited_paper":"/paper/1711.05101","citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:1cba2bbc4bad3c3d568b3dbcf366a3097aaf99078379d3f72131b4b584cb2590","observation_id":"f6e385b6-d0d8-4a9f-bc16-51fe21f8617c","resolution":{"observed_at":"2026-08-08T15:35:36.122737Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T15:35:36.826723Z","title":"Leveraging optimization for adaptive attacks on image watermarks","venue":null,"work_id":"c71fc24e-c373-47c2-9d6e-3c3982670b9b","year":2024},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.127568Z"},"links":{"citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:39eb63163475ca25fff5b87625d2645e98504aa7d7085ebeefd542a565bf5699","observation_id":"3873903f-9c3d-45b0-94f0-9085b4a066e3","resolution":{"observed_at":"2026-08-08T15:35:36.831895Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T15:35:36.131918Z","title":"Towards Blind Watermarking : Combining Invertible and Non-invertible Mechanisms","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.131918Z"},"links":{"citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:a24d8517f7189972378fb538419b866b4666b6b2951771620c625fe6a8e05b59","observation_id":"9e261998-a708-4c2b-aad7-0929e60df3c6","resolution":{"observed_at":"2026-08-08T15:35:36.131918Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T15:35:36.812228Z","title":"Towards deep learning models resistant to adversarial attacks","venue":null,"work_id":"aa1c1e0b-5d5c-4529-b000-67ff2312abde","year":2017},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.136306Z"},"links":{"citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:111832d1b6df0455d753e75c1a0eff3fb8ef44e342f019b94535b5c279332237","observation_id":"1f99ec8a-3624-4aeb-ab5e-cb048022c9b4","resolution":{"observed_at":"2026-08-08T15:35:36.816629Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T15:35:36.798357Z","title":"A., Ajay, M","venue":null,"work_id":"ac9df5b9-61fa-484a-9af2-a2189e9ffb89","year":2008},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.140658Z"},"links":{"citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:596d559f8b89390ac76bef58fc5a9a330d63c539f575dbf0a979bead0508616d","observation_id":"c5a138b0-6c3f-495b-83ba-3f97979efdce","resolution":{"observed_at":"2026-08-08T15:35:36.802624Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T15:35:36.783442Z","title":"Dalle3, 2024","venue":null,"work_id":"548ac2a0-89cf-41ca-91c7-b4d215bbe06f","year":2024},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.145052Z"},"links":{"citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:6ba5e4d9449d1dc967e6bc3596fa9ff0c872c153cef067a6af38c9fb42b0c3ad","observation_id":"f9228a98-0ca1-4ded-8aaf-ca5ac4a5366d","resolution":{"observed_at":"2026-08-08T15:35:36.787944Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.00076","last_updated":"2024-02-14T07:39:54Z","snapshot_observed_at":"2026-08-03T19:56:24.179712Z","submitted_at":"2023-09-29T18:30:29Z","title":"Robustness of AI-Image Detectors: Fundamental Limits and Practical Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.00076","snapshot_observed_at":"2026-08-08T15:35:36.149306Z","title":"S., Rezaei, K., Kumar, A., Chegini, A., Wang, W., and Feizi, S","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.149306Z"},"links":{"cited_paper":"/paper/2310.00076","citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:6759a40e8f2b259999871617f43c0760ddc378c99cbfd1e62a077e7150b4e4de","observation_id":"2df4df55-a91c-4697-a12a-771534c5dfbb","resolution":{"observed_at":"2026-08-08T15:35:36.149306Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T15:35:36.768792Z","title":"Stegastamp: Invisible hyperlinks in physical photographs","venue":null,"work_id":"953a5d9c-60f3-4345-8aa6-1f91868324c9","year":2020},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.153743Z"},"links":{"citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:344be4bdccbc1d68d76210aaf5986bd083cb45e86a0b176dbde22ca98f462b6a","observation_id":"dcb9aefe-67b7-4011-8a32-57b5c2c65993","resolution":{"observed_at":"2026-08-08T15:35:36.773467Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T15:35:36.753937Z","title":"and buley","venue":null,"work_id":"8676afde-220f-44a5-8c6c-584b9371aa92","year":2020},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.157577Z"},"links":{"citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:0f9d82bb102e2b112b47d8383183e6f0b5027ce51d6ca30ad8b4d1d42003cd03","observation_id":"a3350780-4443-4b57-a83e-d4ec2efca53e","resolution":{"observed_at":"2026-08-08T15:35:36.758887Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T15:35:36.162908Z","title":"C., Sheikh, H","venue":null,"work_id":null,"year":2004},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.162908Z"},"links":{"citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:4950a7d26d10db94fc18528202617799aeda62034cbb1bb58e414bd870e04137","observation_id":"165b799d-6895-46e4-a887-23e1b0bb563b","resolution":{"observed_at":"2026-08-08T15:35:36.162908Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.20030","last_updated":"2023-07-04T03:52:06Z","snapshot_observed_at":"2026-08-04T13:34:47.513256Z","submitted_at":"2023-05-31T17:00:31Z","title":"Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.20030","snapshot_observed_at":"2026-08-08T15:35:36.166834Z","title":"Tree-ring watermarks: Fingerprints for diffusion images that are invisible and robust","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.166834Z"},"links":{"cited_paper":"/paper/2305.20030","citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:5cacb91ff3a3759e02a2d7b387ead1a8833c4076b44f36a793bdcfb012e9c08f","observation_id":"a557f1b6-10ac-4134-8436-f4f44cab69c2","resolution":{"observed_at":"2026-08-08T15:35:36.166834Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.09026","last_updated":"2024-06-13T12:01:28Z","snapshot_observed_at":"2026-08-04T01:22:09.464337Z","submitted_at":"2024-06-13T12:01:28Z","title":"Steganalysis on Digital Watermarking: Is Your Defense Truly Impervious?","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.09026","snapshot_observed_at":"2026-08-08T15:35:36.170950Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.170950Z"},"links":{"cited_paper":"/paper/2406.09026","citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:99615c8b2540a2824eda5b4000905251e6fd9363d197320c900edb4dcc8b3335","observation_id":"8192f9df-269a-40da-a3ad-f679d973c5ea","resolution":{"observed_at":"2026-08-08T15:35:36.170950Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T15:35:36.175267Z","title":"Artificial Fingerprinting for Generative Models : Rooting Deepfake Attribution in Training Data","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.175267Z"},"links":{"citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:68978f7a73220c200339f21ab0e4dc2aa360286abbea6959c9c7dd179b2f0e70","observation_id":"3fb25af9-30fb-47d4-bc70-e067f079b9f9","resolution":{"observed_at":"2026-08-08T15:35:36.175267Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T15:35:36.730160Z","title":"S., and Fritz, M","venue":null,"work_id":"9d78dbee-3d0a-4b98-a037-d11aaf77bc5a","year":2021},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.179299Z"},"links":{"citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:b0011a611ead9dddc700f2929a38ce0b01a35779727573edbb21b54f627d3737","observation_id":"21e5825e-d3d9-41a7-8288-9ceca2acc5fc","resolution":{"observed_at":"2026-08-08T15:35:36.734908Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1909.01285","last_updated":"2019-09-03T16:28:40Z","snapshot_observed_at":"2026-08-09T10:18:53.354193Z","submitted_at":"2019-09-03T16:28:40Z","title":"Robust Invisible Video Watermarking with Attention","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1909.01285","snapshot_observed_at":"2026-08-08T15:35:36.183608Z","title":"A., Xu, L., Cuesta-Infante, A., and Veeramachaneni, K","venue":null,"work_id":null,"year":1909},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.183608Z"},"links":{"cited_paper":"/paper/1909.01285","citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:ae7b42455f9aaef1ed0794d3a989e7f20e7734e52eb2a4253a43af05830bb06b","observation_id":"45d3b5ec-90ff-4044-b01f-ea8785ee5df2","resolution":{"observed_at":"2026-08-08T15:35:36.183608Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.01953","last_updated":"2024-10-31T17:47:21Z","snapshot_observed_at":"2026-08-05T03:45:55.053236Z","submitted_at":"2023-06-02T23:29:28Z","title":"Invisible Image Watermarks Are Provably Removable Using Generative AI","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.01953","snapshot_observed_at":"2026-08-08T15:35:36.188118Z","title":"Invisible image watermarks are provably removable using generative ai","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.188118Z"},"links":{"cited_paper":"/paper/2306.01953","citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:42777f92cd3b099385daf4520f2099847d538260087a0db5aba4a101ae32220a","observation_id":"185fd3a0-158f-471e-82f2-5cdb6d5fcf00","resolution":{"observed_at":"2026-08-08T15:35:36.188118Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T15:35:36.712865Z","title":"Hidden: Hiding data with deep networks","venue":null,"work_id":"0f59c528-8573-44c0-88c6-fe4a902f9ea7","year":2018},"citing_paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-08T15:35:36.192526Z"},"links":{"citing_paper":"/paper/2502.06418"},"observation_digest":"sha256:816aeed1d75834118d247439862883b65f3b73fa5e0b7ccb788ddbd3d2d82bd1","observation_id":"24f9748c-26c2-4946-b8b4-71d87891873a","resolution":{"observed_at":"2026-08-08T15:35:36.719264Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2502.06418","last_updated":"2025-02-10T12:55:08Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-08T15:28:22.905970Z","submitted_at":"2025-02-10T12:55:08Z","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation"},"reference_resolution":{"displayed":36,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":22,"verified_exact":0,"verified_fuzzy":14},"total_outbound_references":36},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 36 of 36 outbound references and 1 inbound Pith citation observation for arXiv:2502.06418."}