{"as_of":"2026-08-10T00:54:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:8608883ec19a6375a3fd552ee7831fc410409f3eb39312a7ac536d29d7b4fa54","coverage":[{"denominator":69,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":69,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-03T01:56:39.008318Z","state":"measured"},{"denominator":69,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":69,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.19957/citation-record","integrity":"/paper/2607.19957/integrity","json":"/paper/2607.19957/citation-record.json","paper":"/paper/2607.19957"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T01:56:32.438225Z","title":"Claude api docs: Prompt caching","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:32.438225Z"},"links":{"citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:abf8a03349382de44a12a53c4feac6a235166060774ccbd9245dc812eb2d9356","observation_id":"76bee61f-e8b2-4781-b139-17569d82f884","resolution":{"observed_at":"2026-08-03T01:56:32.438225Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.02069","last_updated":"2025-05-15T17:18:12Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-06-04T07:51:30Z","title":"PyramidKV: Dynamic KV Cache Compression based on Pyramidal Information Funneling","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.02069","snapshot_observed_at":"2026-08-03T01:56:32.574414Z","title":"Pyramidkv: Dynamic kv cache compression based on pyramidal information funneling","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:32.574414Z"},"links":{"cited_paper":"/paper/2406.02069","citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:0284c4ae8b55a331b1a357f57d3a4705ba9a85d0541be8ede34e832cb26878bc","observation_id":"4bc3a4f3-b331-487a-9ea6-334c313e725f","resolution":{"observed_at":"2026-08-03T01:56:32.574414Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T01:56:32.750487Z","title":"Jail- breaking black box large language models in twenty queries","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:32.750487Z"},"links":{"citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:7fc70234aaddd3259be53610b562c38f87c70ecd1cfac99a3f207611e832da7d","observation_id":"5535bf99-631b-4e0a-8522-f87351daa5d7","resolution":{"observed_at":"2026-08-03T01:56:32.750487Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2107.03374","last_updated":"2021-07-14T17:16:02Z","snapshot_observed_at":"2026-08-08T11:58:24.516369Z","submitted_at":"2021-07-07T17:41:24Z","title":"Evaluating Large Language Models Trained on Code","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2107.03374","snapshot_observed_at":"2026-08-03T01:56:32.926813Z","title":"Evaluating large language models trained on code","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:32.926813Z"},"links":{"cited_paper":"/paper/2107.03374","citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:49355279cb19924cc5adb8775db965768c5db268c3aa316aadce197bfb366719","observation_id":"47f4cee4-e935-4931-a489-a77f09109c52","resolution":{"observed_at":"2026-08-03T01:56:32.926813Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T01:56:33.103927Z","title":"Flashattention: Fast and memory- efficient exact attention with io-awareness.Advances in neural information processing systems, 2022","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:33.103927Z"},"links":{"citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:f6e95c5b0787bb9ddceb1544554d43b197295798abababa9f291239a4aad6ca5","observation_id":"10f28bf6-e346-4aca-b326-5c21f13ab84e","resolution":{"observed_at":"2026-08-03T01:56:33.103927Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.16130","last_updated":"2025-02-19T10:49:41Z","snapshot_observed_at":"2026-07-06T18:05:11.700127Z","submitted_at":"2024-04-24T18:38:11Z","title":"From Local to Global: A Graph RAG Approach to Query-Focused Summarization","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.16130","snapshot_observed_at":"2026-08-03T01:56:33.274614Z","title":"From local to global: A graph rag ap- proach to query-focused summarization.arXiv preprint arXiv:2404.16130, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:33.274614Z"},"links":{"cited_paper":"/paper/2404.16130","citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:8e267b19fb52d64290bc30dc2451fa852d4f3ab2e80d39488916c045ccf7b1b3","observation_id":"b6b1f555-f3b5-4d81-b5f1-9dab9c9aff4d","resolution":{"observed_at":"2026-08-03T01:56:33.274614Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T01:56:33.393441Z","title":"Whose narrative is it anyway? a kv cache manipulation attack.arXiv preprint arXiv:2511.12752, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:33.393441Z"},"links":{"citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:09e6d5833d9701a44be6b6aac7850be713dde5728ed8fc5dd23b8b3a7a76c344","observation_id":"659894ca-1582-4205-8f9f-188c43a10deb","resolution":{"observed_at":"2026-08-03T01:56:33.393441Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T01:56:33.483383Z","title":"Gemini api docs: Context caching","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:33.483383Z"},"links":{"citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:72e537c7b905ec4e7c5239b7987d1d0f226a1ef86ef94e4ba9e5a69e9b143457","observation_id":"becd5abd-c980-48ad-aec6-8cce8afe4604","resolution":{"observed_at":"2026-08-03T01:56:33.483383Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21783","last_updated":"2024-11-23T23:27:33Z","snapshot_observed_at":"2026-07-06T18:55:11.576666Z","submitted_at":"2024-07-31T17:54:27Z","title":"The Llama 3 Herd of Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.21783","snapshot_observed_at":"2026-08-03T01:56:33.550008Z","title":"The llama 3 herd of models.arXiv preprint arXiv:2407.21783, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:33.550008Z"},"links":{"cited_paper":"/paper/2407.21783","citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:b7b914dbd57970532ea073a83c3e2ceb72b6df9075c959f89e4a70d7b8843100","observation_id":"8af95c54-dc4c-48da-b4f8-cdf7b5593b83","resolution":{"observed_at":"2026-08-03T01:56:33.550008Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T01:56:33.632313Z","title":"Not what you’ve signed up for: Compromising real-world llm-integrated applications with indirect prompt injec- tion","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:33.632313Z"},"links":{"citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:d5be95c8af0fb9357bbeab40289401b7423ccd6d3e50e38bb9c9c6ac24d34912","observation_id":"0684b491-4ceb-42b2-8e57-72be1a387a68","resolution":{"observed_at":"2026-08-03T01:56:33.632313Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T01:56:33.693672Z","title":"Auditing prompt caching in language model APIs","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:33.693672Z"},"links":{"citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:0bfbda39555e174cdb7ecc75fd07d6d4d526af85acee4e273d62bf245d33ebbd","observation_id":"5e537b62-9ac9-4bba-9e7d-3cce98fd9d87","resolution":{"observed_at":"2026-08-03T01:56:33.693672Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T01:56:33.767125Z","title":"Kvquant: Towards 10 million context length llm inference with kv cache quantization.Ad- vances in Neural Information Processing Systems, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:33.767125Z"},"links":{"citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:2947c562aef3ae53d7072f0531264521f07bf84b54a392706b582b5a0026583d","observation_id":"2ca2f016-d008-4bde-9986-1c21bee74b05","resolution":{"observed_at":"2026-08-03T01:56:33.767125Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T01:56:33.836856Z","title":"Can transformer memory be corrupted? in- vestigating cache-side vulnerabilities in large language models.arXiv preprint arXiv:2510.17098, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:33.836856Z"},"links":{"citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:86ac7897b54c97ba8242c30c13485280aeaf88797d53f2e55326814e4aef8820","observation_id":"f2668e0c-8581-475b-b4c7-eb8de1737584","resolution":{"observed_at":"2026-08-03T01:56:33.836856Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T01:56:33.905924Z","title":"EPIC: Efficient position-independent caching for serving large language models","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:33.905924Z"},"links":{"citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:8e5e5bcf2f59b450cbd7b829b7623c7c641a721b64d5564d00e888ded969d766","observation_id":"ebbfb883-b2d0-4f57-a951-7aec2bf25e02","resolution":{"observed_at":"2026-08-03T01:56:33.905924Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T01:56:34.008002Z","title":"Position: The platonic representation hy- pothesis","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:34.008002Z"},"links":{"citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:2947c51eebe08651b13ea58261454ba459389212a2154ece25648aaf471ef7ff","observation_id":"40beb5fc-29a2-4935-bcba-68820c241bf4","resolution":{"observed_at":"2026-08-03T01:56:34.008002Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T01:56:34.092484Z","title":"Pleak: Prompt leaking attacks against large language model applications","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:34.092484Z"},"links":{"citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:61c2be351ba62e2f31e8e0b3231e4cc18ad0f76bee2f06cfb9f2db5f217a3075","observation_id":"aff31cde-4307-45c8-9bd4-188ebd773fd0","resolution":{"observed_at":"2026-08-03T01:56:34.092484Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.19937","last_updated":"2024-10-25T19:18:22Z","snapshot_observed_at":"2026-07-06T19:39:59.961070Z","submitted_at":"2024-10-25T19:18:22Z","title":"RobustKV: Defending Large Language Models against Jailbreak Attacks via KV Eviction","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.19937","snapshot_observed_at":"2026-08-03T01:56:34.156358Z","title":"Robustkv: Defending large language models against jailbreak attacks via kv eviction.arXiv preprint arXiv:2410.19937, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:34.156358Z"},"links":{"cited_paper":"/paper/2410.19937","citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:95c919d52cd113cc4e97428bc5f45c195c8e40006cc0ed69cd4977abb27884d2","observation_id":"2d4fe16c-4b5b-4b3b-b693-0d1747548cc0","resolution":{"observed_at":"2026-08-03T01:56:34.156358Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T01:56:34.239034Z","title":"What disease does this patient have? a large-scale open domain question an- swering dataset from medical exams.Applied Sciences, 2021","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:34.239034Z"},"links":{"citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:5905f9307afbb03d1aef51e49ee3aa5046b0f430f19bf0bca7ed9a18a6b8198c","observation_id":"bf482f37-5dd8-4333-b9f7-f8b1f1c66017","resolution":{"observed_at":"2026-08-03T01:56:34.239034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T01:56:34.305071Z","title":"Pubmedqa: A dataset for biomedical research question answering","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:34.305071Z"},"links":{"citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:a75a82b0dac72907c557cc693bbafb9f2a5717d5cb5bfc72ed39c97f52a50486","observation_id":"fe716894-5b42-42cd-afc9-bc8d0248acb7","resolution":{"observed_at":"2026-08-03T01:56:34.305071Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T01:56:34.382224Z","title":"Efficient memory manage- ment for large language model serving with pagedatten- tion","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:34.382224Z"},"links":{"citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:7eb97937b950f051173bb4a0834c23c730398caccf8aaff58e9471c3dd6a8baa","observation_id":"78350c82-aa1c-460f-b5ca-d493b986f041","resolution":{"observed_at":"2026-08-03T01:56:34.382224Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T01:56:34.491413Z","title":"Fun-tuning: Characterizing the vulnerability of proprietary llms to optimization-based prompt injection attacks via the fine- tuning interface","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:34.491413Z"},"links":{"citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:00b402d3a4af464fc91fb00dafc283acfd8c2de35f638fc74f600f80cb282c75","observation_id":"ddc035c0-585d-476f-a527-fe0e1d8134a5","resolution":{"observed_at":"2026-08-03T01:56:34.491413Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T01:56:34.571008Z","title":"Retrieval-augmented generation for knowledge- intensive nlp tasks.Advances in neural information processing systems, 2020","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:34.571008Z"},"links":{"citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:ae3a6532664a3901ef42e3c04a5c4ab606a2ce6a9a6577c6a746c8b54555a8e0","observation_id":"512cd37f-c5fa-47b6-a52b-e87b334e61ac","resolution":{"observed_at":"2026-08-03T01:56:34.571008Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T01:56:34.677039Z","title":"Snapkv: Llm knows what you are looking for before generation.Advances in Neural Information Processing Systems, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:34.677039Z"},"links":{"citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:1d01eee53229182eea030b9efe20e8fe045f529caae7188c2225c783aa0bd2e1","observation_id":"6c6339f1-5854-41fb-aecf-a81faee838ba","resolution":{"observed_at":"2026-08-03T01:56:34.677039Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T01:56:34.715481Z","title":"Autodan: Generating stealthy jailbreak prompts on aligned large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:34.715481Z"},"links":{"citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:234b476e59dadcec78e34eed24829f9af02a1101ee7e28dff2a0bf6ec0d83a84","observation_id":"8734ed7d-180c-4341-8a70-c98c7005f692","resolution":{"observed_at":"2026-08-03T01:56:34.715481Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T01:56:34.788811Z","title":"Formalizing and benchmarking prompt injection attacks and defenses","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:34.788811Z"},"links":{"citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:e24bd97cd22171274eb05c692d3ac1d903787288a7459f8c25e0d0763bc1d404","observation_id":"98966208-923a-44d2-a004-0022653cb94d","resolution":{"observed_at":"2026-08-03T01:56:34.788811Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T01:56:34.862312Z","title":"Scissorhands: Exploiting the persistence of importance hypothesis for llm kv cache compression at test time.Advances in Neural Information Processing Systems, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:34.862312Z"},"links":{"citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:6dbaee063f33a5ef50c1e6920139759f80f2dbdc4975efedc6c2ff6e30fc4506","observation_id":"6b26162f-8bbd-48ff-9e80-0df22921a0e0","resolution":{"observed_at":"2026-08-03T01:56:34.862312Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.02750","last_updated":"2024-07-25T09:16:05Z","snapshot_observed_at":"2026-07-06T17:25:18.238343Z","submitted_at":"2024-02-05T06:06:47Z","title":"KIVI: A Tuning-Free Asymmetric 2bit Quantization for KV Cache","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.02750","snapshot_observed_at":"2026-08-03T01:56:34.936163Z","title":"Kivi: A tuning-free asymmetric 2bit quanti- zation for kv cache.arXiv preprint arXiv:2402.02750, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:34.936163Z"},"links":{"cited_paper":"/paper/2402.02750","citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:d31a391ac6a0523ad1b7dd850a4aabf5e5b529e194f4d3df039df24506b5ec7d","observation_id":"9487d490-e250-47c5-8ba7-554cf54e1baa","resolution":{"observed_at":"2026-08-03T01:56:34.936163Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T01:56:35.010887Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:35.010887Z"},"links":{"citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:1bc3b3b7a685db20317e2b807181ed107def882584d63601fae0c6b4d16c978f","observation_id":"3ab638b7-fd81-4241-92b4-cc4652df1416","resolution":{"observed_at":"2026-08-03T01:56:35.010887Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T01:56:35.120620Z","title":"Shadow in the cache: Unveiling and mitigating pri- vacy risks of kv-cache in llm inference.arXiv preprint arXiv:2508.09442, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:35.120620Z"},"links":{"citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:90e0d613565accb7e47a63e519e6d898d5e3b8ad0837a66e3dcc38e1fa45ea6e","observation_id":"1d5f0584-56a4-44a6-b35b-2b3333ce30fd","resolution":{"observed_at":"2026-08-03T01:56:35.120620Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T01:56:35.268587Z","title":"Mistral 3","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:35.268587Z"},"links":{"citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:0fc7cd3bbf712d98336d53015eebbc7454af145c2eb7f104f255000df99e835b","observation_id":"3b7850ff-ad6d-4b58-be9b-49f6b072e1c1","resolution":{"observed_at":"2026-08-03T01:56:35.268587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2511.22681","last_updated":"2026-04-27T15:41:55Z","snapshot_observed_at":"2026-08-08T05:27:45.832486Z","submitted_at":"2025-11-27T18:30:19Z","title":"CacheTrap: Unveiling a Stealthier Gray-Box Trojan against LLMs","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2511.22681","snapshot_observed_at":"2026-08-03T01:56:35.356709Z","title":"Cachetrap: Injecting trojans in llms without leaving any traces in inputs or weights.arXiv preprint arXiv:2511.22681, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:35.356709Z"},"links":{"cited_paper":"/paper/2511.22681","citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:e3e0423238a0bd58f4df5382538eb091b4519b18ceb990b80f1887f1e225fd4c","observation_id":"f56b2596-659c-4a56-b328-bcf77c50489f","resolution":{"observed_at":"2026-08-03T01:56:35.356709Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T01:56:35.472033Z","title":"Language models are injective and hence in- vertible.arXiv preprint arXiv:2510.15511, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:35.472033Z"},"links":{"citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:01e4dd9346502904a3b032b5672fa148b8828a338685f05b0a834ea5063b4e8d","observation_id":"594a642e-2761-4bfb-bdcc-aa9a96ac17f3","resolution":{"observed_at":"2026-08-03T01:56:35.472033Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2303.13375","last_updated":"2023-04-12T16:48:39Z","snapshot_observed_at":"2026-07-06T15:07:11.623462Z","submitted_at":"2023-03-20T16:18:38Z","title":"Capabilities of GPT-4 on Medical Challenge Problems","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.13375","snapshot_observed_at":"2026-08-03T01:56:35.587263Z","title":"Capabilities of gpt-4 on medical challenge problems.arXiv preprint arXiv:2303.13375, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:35.587263Z"},"links":{"cited_paper":"/paper/2303.13375","citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:44b322a9e45f8f477303018cedc93edec3acdb262baf443a0c6f35e56f535825","observation_id":"beec5304-bc2b-4c77-8acf-cb88d798bbfe","resolution":{"observed_at":"2026-08-03T01:56:35.587263Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T01:56:35.698057Z","title":"Cahtgpt api docs: Prompt caching","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:35.698057Z"},"links":{"citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:bdb86e76a8be97759e1286c7d4d08240dc2278615717ea4702d0ef3beab4cf40","observation_id":"d020500c-c36e-4a25-833c-ff013d9d2f8f","resolution":{"observed_at":"2026-08-03T01:56:35.698057Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T01:56:35.812634Z","title":"Generative agents: Interactive simulacra of human be- havior","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:35.812634Z"},"links":{"citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:ad79b8571c45af0fcfb9ec917c91d90548a28509ea7422c0af3079104b353b60","observation_id":"52d3ec60-0ee7-46fd-a4ea-284ccb06c1c8","resolution":{"observed_at":"2026-08-03T01:56:35.812634Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T01:56:35.943273Z","title":"Neural exec: Learning (and learning from) execu- tion triggers for prompt injection attacks","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:35.943273Z"},"links":{"citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:e9c731f847aca7662c68c767a6787a3ab8b86793bc2f57e57837ea3cb0823cf4","observation_id":"1b0968ff-f2b0-4c02-98b1-519d9beeaa9a","resolution":{"observed_at":"2026-08-03T01:56:35.943273Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2211.09527","last_updated":"2022-11-17T13:43:20Z","snapshot_observed_at":"2026-07-06T14:19:47.424778Z","submitted_at":"2022-11-17T13:43:20Z","title":"Ignore Previous Prompt: Attack Techniques For Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2211.09527","snapshot_observed_at":"2026-08-03T01:56:36.055764Z","title":"Ignore previous prompt: Attack techniques for language models.arXiv preprint arXiv:2211.09527, 2022","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:36.055764Z"},"links":{"cited_paper":"/paper/2211.09527","citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:b2e1a18bdd9461db94d3462df7a48f54a2c929260892c43a33710577a3550ba4","observation_id":"76464248-9bc2-4aee-a426-350dc7e99458","resolution":{"observed_at":"2026-08-03T01:56:36.055764Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T01:56:36.153947Z","title":"Efficiently scal- ing transformer inference.Proceedings of machine learning and systems, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:36.153947Z"},"links":{"citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:bc6d9cdfb4d74b0108b87105dabdc282d880a68294c1c1ba9afefdc07babc3d3","observation_id":"3f98566c-4260-48a8-b2c5-9a34ac11bf3f","resolution":{"observed_at":"2026-08-03T01:56:36.153947Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T01:56:36.264871Z","title":"Know what you don’t know: Unanswerable questions for SQuAD","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:36.264871Z"},"links":{"citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:f5ef10ff8ac8fb168323aa48831f6115bf952fe09b43c7a11c81d29208c60010","observation_id":"f9c498e7-fc40-43b5-b86f-2e299a9d992b","resolution":{"observed_at":"2026-08-03T01:56:36.264871Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T01:56:36.362137Z","title":"SQuAD: 100,000+ questions for machine comprehension of text","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:36.362137Z"},"links":{"citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:865451fe34dca58bb9645808ba645b770fa11219753211082c7ea302be13308b","observation_id":"babe8120-6f08-484b-8e09-0d396d9ca4d2","resolution":{"observed_at":"2026-08-03T01:56:36.362137Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T01:56:36.432770Z","title":"Tool- former: Language models can teach themselves to use tools.Advances in Neural Information Processing Sys- tems, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:36.432770Z"},"links":{"citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:d9b0b3da8eeadd74aa623dec049bfe616fcc98caf3f474664010ce41149db110","observation_id":"5442b2d0-93d9-48b8-801f-0ce84440d136","resolution":{"observed_at":"2026-08-03T01:56:36.432770Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T01:56:36.498939Z","title":"Enhancing prompt injection attacks to llms via poison- ing alignment","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:36.498939Z"},"links":{"citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:c1993b5a1d6ea69a6986de77393d5ccac4a22a89caf942ca958a138f8cce6d99","observation_id":"4907f648-be4f-4f68-80d1-b5aab52e9e57","resolution":{"observed_at":"2026-08-03T01:56:36.498939Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T01:56:36.567589Z","title":"Optimization-based prompt injection attack to llm-as- a-judge","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:36.567589Z"},"links":{"citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:62ad4d10239606fa9e417b003233c129028f6b271c6e7a36fd9e4f263309fe9c","observation_id":"a68f579c-9358-416b-bdc8-87a83fcf2b99","resolution":{"observed_at":"2026-08-03T01:56:36.567589Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T01:56:36.664785Z","title":"Large language models encode clinical knowledge.Na- ture, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:36.664785Z"},"links":{"citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:ab0fd5f56a021d110c0fa7daf2164f736f4b5f0c39674ba54f487d4d45919458","observation_id":"eca04899-8bb9-47d5-97f1-cbef3a5abe35","resolution":{"observed_at":"2026-08-03T01:56:36.664785Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T01:56:36.734952Z","title":"The early bird catches the leak: Unveiling timing side channels in llm serving systems","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:36.734952Z"},"links":{"citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:dbc877d53888aa53d42cfe9e9fe348097d7259be47c58a32a851dda8cf602661","observation_id":"dbf27f94-e6b5-4364-b9a2-688569e368a4","resolution":{"observed_at":"2026-08-03T01:56:36.734952Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T01:56:36.800237Z","title":"Roformer: Enhanced trans- former with rotary position embedding.Neurocomput- ing, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:36.800237Z"},"links":{"citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:25079c316e6500a9198ce3918b785a3fde86604396b68957ca5800ebb57b39cc","observation_id":"9d25a882-d85d-4e37-bcd4-6bbe96bb479c","resolution":{"observed_at":"2026-08-03T01:56:36.800237Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T01:56:36.897223Z","title":"Attention is all you need.Advances in neural information processing systems, 2017","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:36.897223Z"},"links":{"citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:dff9fb388bfc17030c1381ae6a4db0d4fca2ad997f4956d218b1b86abfe2f9eb","observation_id":"fb32eee8-9f56-4eaf-8a78-1af2d4822453","resolution":{"observed_at":"2026-08-03T01:56:36.897223Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T01:56:36.998881Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:36.998881Z"},"links":{"citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:40b3ba83b882f27360ded24296791a9a578cd400e538626056e078799a7c3cd6","observation_id":"a81c9d51-5635-4f98-b705-1e80aafd6439","resolution":{"observed_at":"2026-08-03T01:56:36.998881Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T01:56:37.099729Z","title":"Mepic: Memory efficient position independent caching for llm serving.arXiv preprint arXiv:2512.16822, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:37.099729Z"},"links":{"citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:43a3c63bb8e6638d7ede9d124ff63291abe68782a4280d2517735d3fc78ffc59","observation_id":"682e2a7f-c9a8-4fd1-9dc6-909b8c5e2dc4","resolution":{"observed_at":"2026-08-03T01:56:37.099729Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.21228","last_updated":"2026-05-08T21:34:18Z","snapshot_observed_at":"2026-08-09T15:11:57.934243Z","submitted_at":"2025-04-29T23:42:21Z","title":"CachePrune: Teaching LLMs What Not to Follow via KV-Cache Editing","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.21228","snapshot_observed_at":"2026-08-03T01:56:37.199071Z","title":"Cacheprune: Neural-based attribution de- fense against indirect prompt injection attacks.arXiv preprint arXiv:2504.21228, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:37.199071Z"},"links":{"cited_paper":"/paper/2504.21228","citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:8c6068a42a4e63237523e8d26d382bd04a8aa23ca5b03405f84722cb686da9e6","observation_id":"d7706ae7-7ab7-4cdf-834d-f9290be9f45f","resolution":{"observed_at":"2026-08-03T01:56:37.199071Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T01:56:37.304375Z","title":"Webinject: Prompt injection attack to web agents","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:37.304375Z"},"links":{"citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:e2ca24ea971d2621261f161ac56ec3271654f3c29373a2483e7b754f685b62e7","observation_id":"7789d43e-4182-49fc-9974-0f2fbfdda9a8","resolution":{"observed_at":"2026-08-03T01:56:37.304375Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T01:56:37.375177Z","title":"Jailbroken: How does llm safety training fail?Advances in Neural Information Processing Systems, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:37.375177Z"},"links":{"citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:01c871652d3faa8b111e18d4cfa2751e582a63b5564e820c3fb51091e8972627","observation_id":"ddc0cf48-139e-4699-b784-79cd874f1d33","resolution":{"observed_at":"2026-08-03T01:56:37.375177Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T01:56:37.429044Z","title":"I know what you asked: Prompt leakage via kv-cache sharing in multi- tenant llm serving","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:37.429044Z"},"links":{"citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:21b6265060ba46f58a98c158c0682bc1af5de3348820417a619c51be40c28351","observation_id":"01b122fd-ac0b-4827-bccf-5acd8954fb76","resolution":{"observed_at":"2026-08-03T01:56:37.429044Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.17453","last_updated":"2024-04-07T00:56:53Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-09-29T17:59:56Z","title":"Efficient Streaming Language Models with Attention Sinks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.17453","snapshot_observed_at":"2026-08-03T01:56:37.496488Z","title":"Efficient streaming lan- guage models with attention sinks.arXiv preprint arXiv:2309.17453, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:37.496488Z"},"links":{"cited_paper":"/paper/2309.17453","citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:efdaabd532f7eaac4652982b3943d28264c03669a81ad830390c8e549abc44a0","observation_id":"048af9fa-7f1e-4641-b00e-3301566f757d","resolution":{"observed_at":"2026-08-03T01:56:37.496488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T01:56:37.594048Z","title":"Efficient streaming language models with attention sinks","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:37.594048Z"},"links":{"citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:6749418c49fb203302b3b3f01fe65ac2d7496b258fe343fabde1bfaee07e94ec","observation_id":"3b631576-7ab0-4be8-b6cb-2f9a804d0d4c","resolution":{"observed_at":"2026-08-03T01:56:37.594048Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.09388","last_updated":"2025-05-14T13:41:34Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-05-14T13:41:34Z","title":"Qwen3 Technical Report","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.09388","snapshot_observed_at":"2026-08-03T01:56:37.662550Z","title":"Qwen3 technical report","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:37.662550Z"},"links":{"cited_paper":"/paper/2505.09388","citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:f2d512662155d6abcdbd1e436877f58bf520a84eafb893a0739f8c9238afdce0","observation_id":"0c384082-eb8a-4156-a0d0-503f1fef20f2","resolution":{"observed_at":"2026-08-03T01:56:37.662550Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.16525","last_updated":"2025-05-16T12:42:48Z","snapshot_observed_at":"2026-08-07T16:57:17.813312Z","submitted_at":"2025-03-17T16:43:35Z","title":"KVShare: An LLM Service System with Efficient and Effective Multi-Tenant KV Cache Reuse","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.16525","snapshot_observed_at":"2026-08-03T01:56:37.758047Z","title":"Kvshare: An llm service system with efficient and effective multi-tenant kv cache reuse.arXiv preprint arXiv:2503.16525, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:37.758047Z"},"links":{"cited_paper":"/paper/2503.16525","citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:97735fdefc02e6166b51643ab5277cbe30c8379c66643b25a4de73f0427e01fb","observation_id":"edd1339b-d29f-4b04-a227-abc7ae13b5e9","resolution":{"observed_at":"2026-08-03T01:56:37.758047Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T01:56:37.854011Z","title":"KVLink: Accelerating large language models via efficient KV cache reuse","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:37.854011Z"},"links":{"citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:181a063fada8286e93c90fa53fccfe38420bd4e715bb13e3588e8ce93a086ee1","observation_id":"d939c736-1cdf-436f-8613-c75180c6e8f7","resolution":{"observed_at":"2026-08-03T01:56:37.854011Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T01:56:37.924862Z","title":"Mma-diffusion: Multi- modal attack on diffusion models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:37.924862Z"},"links":{"citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:f1bba503b9490e74d5bf9a2229ca89be9b50183b22f96ddd68848a4923a2492a","observation_id":"8f90ec81-fc5c-4d82-baa2-4d523c8cdfc1","resolution":{"observed_at":"2026-08-03T01:56:37.924862Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T01:56:38.018483Z","title":"Sneakyprompt: Jailbreaking text-to-image generative models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:38.018483Z"},"links":{"citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:44589dfcd5bfedc9a5c612372d8b6607eadb1b0476a62b6620c297a7bf8456e6","observation_id":"e994049a-2028-401b-a5df-887e5306a49b","resolution":{"observed_at":"2026-08-03T01:56:38.018483Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T01:56:38.088822Z","title":"Hotpotqa: A dataset for diverse, ex- plainable multi-hop question answering","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:38.088822Z"},"links":{"citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:e82b4a2c288934cc0cc51ec803fda4280e8d4b2ef297c0c69551dd7ed04729c8","observation_id":"cb28e9e2-26ac-4210-9532-4440bfba1461","resolution":{"observed_at":"2026-08-03T01:56:38.088822Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T01:56:38.159307Z","title":"Cacheblend: Fast large language model serving for rag with cached knowledge fusion","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:38.159307Z"},"links":{"citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:b120824dd324247ba9d9a667435f765217991ba21e297379a1a08a370c21341c","observation_id":"26212526-fcfd-440f-b781-c6553bf64409","resolution":{"observed_at":"2026-08-03T01:56:38.159307Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T01:56:38.227108Z","title":"H2o: Heavy- hitter oracle for efficient generative inference of large language models.Advances in Neural Information Pro- cessing Systems, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:38.227108Z"},"links":{"citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:30039c11c5fe34eaec9688d042fdb6fbf66690814007259cda6a8f007b90ddc0","observation_id":"488dd1c3-2575-4ad6-96ee-08a5c6de44eb","resolution":{"observed_at":"2026-08-03T01:56:38.227108Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T01:56:38.324648Z","title":"Sglang: Efficient execution of structured language model programs.Advances in neural information pro- cessing systems, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:38.324648Z"},"links":{"citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:7dca9bf67565486941481203878a39983dfa660cefa0232a3ae29d819d6f97dc","observation_id":"1f16a3fd-6ca3-4367-9479-149febf75522","resolution":{"observed_at":"2026-08-03T01:56:38.324648Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-07-06T15:59:23.019044Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-03T01:56:38.432817Z","title":"Universal and trans- ferable adversarial attacks on aligned language models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:38.432817Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:ef1c100fdb3054185e4a8c39b4eff4c397b05829041a890ee73c33ef4174eae0","observation_id":"698313de-75b1-4dba-b182-2cbd42c0872a","resolution":{"observed_at":"2026-08-03T01:56:38.432817Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T01:56:38.561046Z","title":"{PoisonedRAG}: Knowledge corruption attacks to {Retrieval-Augmented} generation of large language models","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:38.561046Z"},"links":{"citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:17a26e46c4f726952a1b036d36014a04e30e11c51bc6b1f5055415d97499a661","observation_id":"c9d9575f-f46c-4a03-8e31-2bf06b6b4c8e","resolution":{"observed_at":"2026-08-03T01:56:38.561046Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T01:56:38.736929Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:38.736929Z"},"links":{"citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:84be3304a513d7eeac97fdacbe7be33ea92733f59d5cdf2c74dff9895cc0f1b2","observation_id":"80a9162f-df12-408f-aa0c-fc221af4bc15","resolution":{"observed_at":"2026-08-03T01:56:38.736929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T01:56:38.890893Z","title":"This rule OVERRIDES rule 1","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:38.890893Z"},"links":{"citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:4e8277cda876e65be98b9e5994b18561880adaccf6e92a5c84bfa53eb803d023","observation_id":"4e35f9b1-b16f-428e-a470-682f31bbc02c","resolution":{"observed_at":"2026-08-03T01:56:38.890893Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T01:56:39.008318Z","title":"High”–>“Low","venue":null,"work_id":null,"year":1995},"citing_paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","version":2},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-03T01:56:39.008318Z"},"links":{"citing_paper":"/paper/2607.19957"},"observation_digest":"sha256:8029759b5c765944cd732ff4128f4bf6a7731bc18ea326477be3d0e1284d1c13","observation_id":"41d0176b-4114-40f0-bf0d-1879253b5fd9","resolution":{"observed_at":"2026-08-03T01:56:39.008318Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2607.19957","last_updated":"2026-07-31T07:49:20Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-06T01:02:54.008536Z","submitted_at":"2026-07-22T09:32:45Z","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse"},"reference_resolution":{"displayed":69,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":69,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":69},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 69 of 69 outbound references and 0 inbound Pith citation observations for arXiv:2607.19957."}