Pith. sign in

Paper Citation Record · LEDGER

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications

As of 10 August 2026, this Paper Citation Record lists 70 of 70 outbound references and 0 inbound Pith citation observations for arXiv:2606.18673.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2606.18673 v1

Coverage vector

measured 70 of 70 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-06-26T20:47:36.337189Z

measured 70 of 70 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-10T06:31:04.303077+00:00

measured 0 of 0 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: cited_works

Reference resolution

70 of 70 outbound references displayed

  • verified exact13
  • verified fuzzy0
  • unresolved56
  • parse uncertain0
  • malformed identifier1
  • metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation f35e3636-ef7f-4eb6-97e2-56d85813603a · outbound

This paper cites https://huggingface.co/sentence-transformers.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications https://huggingface.co/sentence-transformers

Reference 1

Resolution
unresolved
no resolver link, observed 2026-06-26T20:47:36.337189Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:6e7b5312443e8cbb69980a9afb4c190f64eacdf5b0bfe0f23efa4e2a40670028

Observation e230de10-8b8f-497a-8986-25f8a618f20f · outbound

This paper cites https://huggingface.co/datasets/fka/awesome- chatgpt-prompts.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications https://huggingface.co/datasets/fka/awesome- chatgpt-prompts

Reference 2

Resolution
unresolved
no resolver link, observed 2026-06-26T20:47:36.337189Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:70d922db70c5d1867285311076dd8d583843449a00eeeebf2c6da3f2e4d531a4

Observation b0315aa5-5899-4155-8600-502ff5b14e5f · outbound

This paper cites https://learnprompting.org/docs/prompt_hacking/ defensive_measures.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications https://learnprompting.org/docs/prompt_hacking/ defensive_measures

Reference 3

Resolution
unresolved
no resolver link, observed 2026-06-26T20:47:36.337189Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:ae2048fe2cbaa05895c8d7906680d9f4dc4bc98f4ef8d9fa66eb084efde2404e

Observation e3ad4d49-ca31-4c1c-ac8a-93b570ba8293 · outbound

This paper cites https://huggingface.co/meta-llama/Llama-2-7b-chat- hf.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications https://huggingface.co/meta-llama/Llama-2-7b-chat- hf

Reference 4

Resolution
unresolved
no resolver link, observed 2026-06-26T20:47:36.337189Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:9e087a5b90bc239582b59d4bfa895bb828958cd3f3e18a7cc29a76514a88d83f

Observation 389ebdd2-eeb3-4be3-a2b1-d58052f95d9b · outbound

This paper cites https://promptbase.com/.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications https://promptbase.com/

Reference 5

Resolution
unresolved
no resolver link, observed 2026-06-26T20:47:36.337189Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:a24f4f1f75391d988cc74ae90472613dcfb11b7784b85f1606cf9b1c92b3f1c2

Observation 729f7532-c15f-4948-95d7-c78a2e69c3d2 · outbound

This paper cites https://nvd.nist.gov/vuln/detail/cve-2024-5184.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications https://nvd.nist.gov/vuln/detail/cve-2024-5184

Reference 6

Resolution
unresolved
no resolver link, observed 2026-06-26T20:47:36.337189Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:6d8c2d817708bb752f047ba6f6c07d5efdb03df74a8b2c7c69d4dd5924ea4299

Observation 9fb76333-127b-44a9-bf2a-4c7adcafbd18 · outbound

This paper cites https://github.com/LouisShark/chatgpt_system_ prompt/tree/066b8f9a6db9dce64f2d5d36d91f9e87d8ca2530.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications https://github.com/LouisShark/chatgpt_system_ prompt/tree/066b8f9a6db9dce64f2d5d36d91f9e87d8ca2530

Reference 7

Resolution
unresolved
no resolver link, observed 2026-06-26T20:47:36.337189Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:c50adf5d89d183f58b8ce3b2a4a24df3fb0b5996059b0d83e9a55a0b14f55996

Observation 35022add-54ba-44f7-a597-ff0fee6160c4 · outbound

This paper cites https://huggingface.co/meta-llama/Llama-3.1-8B- Instruct.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications https://huggingface.co/meta-llama/Llama-3.1-8B- Instruct

Reference 8

Resolution
unresolved
no resolver link, observed 2026-06-26T20:47:36.337189Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:ff4b72916e759f061fafedb5aa775b54330714c0ff012234b0f5250bbd0a5139

Observation 160d02c8-9793-48c2-9efd-31d6171d5ee2 · outbound

This paper cites https://huggingface.co/meta-llama/Llama-3.3-70B- Instruct.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications https://huggingface.co/meta-llama/Llama-3.3-70B- Instruct

Reference 9

Resolution
unresolved
no resolver link, observed 2026-06-26T20:47:36.337189Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:f842671ffd730d53e615c273f71ed403b009f737bd84e100e03d0f2a6f09faaf

Observation 6fc3c137-96e1-4c20-b311-141d21f5c794 · outbound

This paper cites https://github.com/friuns2/Leaked- GPTs/blob/main/gpts/MangaMikoAnimeGirlfriend.md.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications https://github.com/friuns2/Leaked- GPTs/blob/main/gpts/MangaMikoAnimeGirlfriend.md

Reference 10

Resolution
unresolved
no resolver link, observed 2026-06-26T20:47:36.337189Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:f34cbfa59ad74b6b05c036c96417ad7c1063e1eee5e6ca7824cae5fcf5f7b99e

Observation bd26acb0-8de5-44b2-9c46-6259d7aa8070 · outbound

This paper cites https://huggingface.co/mistralai/Mistral-7B- Instruct-v0.3.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications https://huggingface.co/mistralai/Mistral-7B- Instruct-v0.3

Reference 11

Resolution
unresolved
no resolver link, observed 2026-06-26T20:47:36.337189Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:e25571c946ea5da660827a2c7291cef5779579b9ff6915b521dfd4540d3536b1

Observation f605472e-31a8-450d-8490-abed275ac0a4 · outbound

This paper cites https://platform.openai.com/docs.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications https://platform.openai.com/docs

Reference 12

Resolution
unresolved
no resolver link, observed 2026-06-26T20:47:36.337189Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:8b61e80dd0d96411dda0a8ebe494ae8856d30ddc4d849a4fb9ff5f39dbd5e14f

Observation 6bdca070-845a-416a-a296-91bd0a1679c9 · outbound

This paper cites https://huggingface.co/Qwen/Qwen2.5-72B-Instruct.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications https://huggingface.co/Qwen/Qwen2.5-72B-Instruct

Reference 13

Resolution
unresolved
no resolver link, observed 2026-06-26T20:47:36.337189Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:b2bd14256d20abb7051b572db5e348c5d9eb4e77ae163b4a6a81892622ace605

Observation 37b85ed4-d5c2-4101-bc49-fe71925b03c3 · outbound

This paper cites https://github.com/agentscope- ai/agentscope/tree/main/examples/functionality/rag.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications https://github.com/agentscope- ai/agentscope/tree/main/examples/functionality/rag

Reference 14

Resolution
unresolved
no resolver link, observed 2026-06-26T20:47:36.337189Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:160c8bb4ed6d4cdce18daff8d98f399d4015b0245a39994363642862ff262648

Observation 94253ff4-f716-4670-b3dd-8b70a2be55a6 · outbound

This paper cites https://github.com/friuns2/BlackFriday-GPTs- Prompts/blob/main/gpts/simulation-game.md.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications https://github.com/friuns2/BlackFriday-GPTs- Prompts/blob/main/gpts/simulation-game.md

Reference 15

Resolution
unresolved
no resolver link, observed 2026-06-26T20:47:36.337189Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:715c6c2932c692df3be0e0666491291c4a7531d3e1a9bb83c792cd291b9bfa51

Observation e81be67d-1483-48c8-a131-01478a7e8199 · outbound

This paper cites https://claude.com/pricing/enterprise.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications https://claude.com/pricing/enterprise

Reference 16

Resolution
unresolved
no resolver link, observed 2026-06-26T20:47:36.337189Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:d7148d395a575aef0457063ec47402c4b2c068716a94802841819ee9827b0a5b

Observation ade7ce24-0a49-4c2c-8b5c-ab20c76c015d · outbound

This paper cites https://github.com/elder- plinius/CL4R1T4S.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications https://github.com/elder- plinius/CL4R1T4S

Reference 17

Resolution
unresolved
no resolver link, observed 2026-06-26T20:47:36.337189Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:2b38c2f8a786aa598d14bdde8959b6219482396a6f2840800a4d2f6684722787

Observation 7512bfc6-9ffc-444d-bed2-8ccd764090dd · outbound

This paper cites https://embracethered.com/blog/posts/2025/windsurf-data-exfiltration- vulnerabilities/.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications https://embracethered.com/blog/posts/2025/windsurf-data-exfiltration- vulnerabilities/

Reference 18

Resolution
unresolved
no resolver link, observed 2026-06-26T20:47:36.337189Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:ed08c62d832289c588d689fc97fdc0e24f513c28421d83567d8b0a4a19905801

Observation 12693b7e-1bbd-4ae2-a0de-125ede82638a · outbound

This paper cites https://genai.owasp.org/llmrisk/ llm072025-system-prompt-leakage/.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications https://genai.owasp.org/llmrisk/ llm072025-system-prompt-leakage/

Reference 19

Resolution
unresolved
no resolver link, observed 2026-06-26T20:47:36.337189Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:41445b48d4f0b9a5220b2b57d870ca076c0cfca02776105eab7fd6fd6784ae29

Observation 5d17a7c6-b4a3-48fc-8a60-45e48c5217ed · outbound

This paper cites https://bugcrowd.com/engagements/openai.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications https://bugcrowd.com/engagements/openai

Reference 20

Resolution
unresolved
no resolver link, observed 2026-06-26T20:47:36.337189Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:82c99551d3d9c058fa1b68955bcbc1513f5e51e2f9a35e60394fc27d55e61011

Observation 5487212e-17c7-45ba-84e9-47d3492fb7b5 · outbound

This paper cites https://huggingface.co/Qwen/Qwen3-30B- A3B-Instruct-2507.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications https://huggingface.co/Qwen/Qwen3-30B- A3B-Instruct-2507

Reference 21

Resolution
unresolved
no resolver link, observed 2026-06-26T20:47:36.337189Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:5515bb15e56ced1ae07caa5bb0cb5ed66ac8eb08cdcf81abf5bdccb77effdb06

Observation dc98a60d-240a-451e-8371-3187b14dc681 · outbound

This paper cites https://huggingface.co/Qwen/Qwen3-32B.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications https://huggingface.co/Qwen/Qwen3-32B

Reference 22

Resolution
unresolved
no resolver link, observed 2026-06-26T20:47:36.337189Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:8c670801ac76090953959d862a33ef70a71b4394382cdd52c35342c31484f91f

Observation 4922e0d0-c166-4597-a4fd-36440f6c26c4 · outbound

This paper cites https://huggingface.co/Qwen/Qwen3-4B-Instruct- 2507.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications https://huggingface.co/Qwen/Qwen3-4B-Instruct- 2507

Reference 23

Resolution
unresolved
no resolver link, observed 2026-06-26T20:47:36.337189Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:e01b96a9e0a5e2401ff1ff352e3e501334209b8e89924a602ab898b54c7af822

Observation 82201050-838b-4d78-a97b-cca4b3b0a47c · outbound

This paper cites 2025.Tongyi Agent Platform.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications 2025.Tongyi Agent Platform

Reference 24

Resolution
unresolved
no resolver link, observed 2026-06-26T20:47:36.337189Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:95ff1d4e4332bd27ecdad9024b9bab7c801b7c7acd220fe0650da1d11d9d229b

Observation 445a9c21-5110-4de6-982c-58d465d9a100 · outbound

This paper cites 2025.AgentBuilder.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications 2025.AgentBuilder

Reference 25

Resolution
unresolved
no resolver link, observed 2026-06-26T20:47:36.337189Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:0107067b80ab9b5c466107b25ec2eb4d9992682c1f429bef8959995fc28e042f

Observation dfe4cd5c-0705-4516-93e3-1bccea357b39 · outbound

This paper cites 2024.Coze.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications 2024.Coze

Reference 26

Resolution
unresolved
no resolver link, observed 2026-06-26T20:47:36.337189Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:81b596d243098b3976156f8948ceaab908a9c07835a2579b75021c138744dba6

Observation 2388b805-6708-48e8-81c1-263913e7c2f6 · outbound

This paper cites 2024.Coze Community Guidelines.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications 2024.Coze Community Guidelines

Reference 27

Resolution
unresolved
no resolver link, observed 2026-06-26T20:47:36.337189Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:a9d9d18c12ec2eea06bd06b62aa7773405fa5e104efcfbbca4b33626a8a1f60f

Observation 671d9ccd-3cdb-4248-99f8-ad10dec4c812 · outbound

This paper cites an unresolved cited work.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Unresolved cited work

Reference 28

Resolution
unresolved
no resolver link, observed 2026-06-26T20:47:36.337189Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:952ba418d8df5519e4ca18c6934d87d26d4613349d845b3dfd730a87b411df13

Observation 560040b1-14a2-43a8-a5f9-efc637aece75 · outbound

This paper cites an unresolved cited work.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Unresolved cited work

Reference 29

Resolution
unresolved
no resolver link, observed 2026-06-26T20:47:36.337189Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:26c81a23cbf1ebdb8a460bf6da8ced6cac5f308861dcf0f4ec58be12fab90dc5

Observation 1426113a-8a19-42af-ac9c-7f79931bcf79 · outbound

This paper cites an unresolved cited work.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Unresolved cited work

Reference 30

Resolution
unresolved
no resolver link, observed 2026-06-26T20:47:36.337189Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:f94b21e991617c2b020e848e1d6c5e867672a89a0dab2e15dcff9c0fd32e1abc

Observation 11510c15-b9e1-4dc5-8a0a-736bce17a901 · outbound

This paper cites Defending Against Prompt Injection With a Few DefensiveTokens.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Defending Against Prompt Injection With a Few DefensiveTokens

Reference 31

Resolution
verified exact
arxiv_id, observed 2026-07-04T00:59:20.694798Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:7d900e9a265cbe76df168ebce407c44ed1d1882a8254fea791555c1615d499ff

Observation 02a6a40e-660c-4944-9df3-eafb10711cf0 · outbound

This paper cites an unresolved cited work.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Unresolved cited work

Reference 32

Resolution
unresolved
no resolver link, observed 2026-06-26T20:47:36.337189Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:ac6fe164edf5077601d36d04d8ec96a1f9394db1d9463ff16221e32ecd445537

Observation 15b94641-7c45-4b2a-b689-6b5551b03375 · outbound

This paper cites an unresolved cited work.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Unresolved cited work

Reference 33

Resolution
unresolved
no resolver link, observed 2026-06-26T20:47:36.337189Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:2739d38ecd0dd049d0518b11bc90ec70fd2f8e00a0ee4aae4e7fdc63df80e5a9

Observation 524540bc-38f3-4e02-b52c-95513c29f881 · outbound

This paper cites What Does BERT Look At? An Analysis of BERT's Attention.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications What Does BERT Look At? An Analysis of BERT's Attention

Reference 34

Resolution
verified exact
local_arxiv, observed 2026-07-04T00:59:20.683094Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:95e75339da7052c7a7ee41a840c7c9f998c12a2af72fa456bdf57b68d6ea1ab0

Observation 377768ec-7673-4353-9fe8-e2e7bdfe30bb · outbound

This paper cites AgentScope: A Flexible yet Robust Multi-Agent Platform.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications AgentScope: A Flexible yet Robust Multi-Agent Platform

Reference 35

Resolution
verified exact
arxiv_id, observed 2026-07-04T00:59:20.689347Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:d97dd50e2172de76447a761df811735dd9a7742a15f1e689dcd49ff99887a2f2

Observation 65216aaf-2c86-4a59-abd0-e1f0b3f1c956 · outbound

This paper cites an unresolved cited work.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Unresolved cited work

Reference 36

Resolution
unresolved
no resolver link, observed 2026-06-26T20:47:36.337189Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:43850eda9e37a65d880f7656c1d2ab1b7e8b19751fd4524d7190938a582b3f85

Observation 6a0f5142-a44d-4303-aff4-d5abbecbf17c · outbound

This paper cites Model Context Protocol (MCP): Landscape, Security Threats, and Future Research Directions.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Model Context Protocol (MCP): Landscape, Security Threats, and Future Research Directions

Reference 37

Resolution
verified exact
local_arxiv, observed 2026-07-04T00:59:20.715814Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:20e042d386ae419fe7546c686712f7f8dba6fe4e0d5c6e1b1a2bda96045f8216

Observation 39b7b011-8912-48da-87bb-1bb55caebce6 · outbound

This paper cites an unresolved cited work.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Unresolved cited work

Reference 38

Resolution
unresolved
no resolver link, observed 2026-06-26T20:47:36.337189Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:c373ae0df59e508eab182b977372af25c8adefc4e7b4b593219236459453cbc8

Observation c2518f57-85e2-4c7e-99b9-7de3f4907af3 · outbound

This paper cites an unresolved cited work.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Unresolved cited work

Reference 39

Resolution
unresolved
no resolver link, observed 2026-06-26T20:47:36.337189Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:7aa410d1cf1d700521a85ed24ec833f3f3c07254d504826cb379426db3f93c8c

Observation ee339261-ff22-468f-9e4b-838b95dd7e6a · outbound

This paper cites PromptKeeper: Safeguarding System Prompts for LLMs.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications PromptKeeper: Safeguarding System Prompts for LLMs

Reference 40

Resolution
verified exact
arxiv_id, observed 2026-07-04T00:59:20.709661Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:3e950efbffcd4d2931ac60df325bc9c8c4da848ffbcc7acea452327f80ede119

Observation 3a54069d-7ec0-439b-87a6-1b289330b9df · outbound

This paper cites an unresolved cited work.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Unresolved cited work

Reference 41

Resolution
unresolved
no resolver link, observed 2026-06-26T20:47:36.337189Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:e06b14991ae4930962fd6fa94c68d9de4f4ed1ca03eac2ab95f21cf7ec7f2cea

Observation 9a8515bc-a01e-45d7-9006-93550d9b20eb · outbound

This paper cites Why Are My Prompts Leaked? Unraveling Prompt Extraction Threats in Customized Large Language Models.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Why Are My Prompts Leaked? Unraveling Prompt Extraction Threats in Customized Large Language Models

Reference 42

Resolution
verified exact
arxiv_id, observed 2026-07-04T00:59:20.699931Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:ed1c2f5a0622430261365c4d55c1c3afb778fae3151be21378ab30e89bcc8ebd

Observation 074db26c-73a9-4261-9371-f23180fa9b31 · outbound

This paper cites an unresolved cited work.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Unresolved cited work

Reference 43

Resolution
unresolved
no resolver link, observed 2026-06-26T20:47:36.337189Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:99a6201b751fbfad6fbc834ee515965957505c7736300b1695ecd170e8c3aa0b

Observation 56799426-8b99-4a62-9b1e-c0b2cd3813c6 · outbound

This paper cites Prompt Injection attack against LLM-integrated Applications.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Prompt Injection attack against LLM-integrated Applications

Reference 44

Resolution
verified exact
local_arxiv, observed 2026-07-04T00:59:20.664882Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:eeb3390a718265867e11a900d0143ca473d847dd2f0ccfd7612a0ea828db7cd1

Observation 2ce12970-1d18-4e97-9091-66415c8e8fd3 · outbound

This paper cites an unresolved cited work.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Unresolved cited work

Reference 45

Resolution
unresolved
no resolver link, observed 2026-06-26T20:47:36.337189Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:a5ba2e7607343505b3070ca0f4bacb16620db9d3cca29c05cc78b2c0cf23b5a9

Observation 2863930b-93dd-47cc-9701-74662d5a8038 · outbound

This paper cites an unresolved cited work.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Unresolved cited work

Reference 46

Resolution
unresolved
no resolver link, observed 2026-06-26T20:47:36.337189Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:b4a48156784835e74d2c7ac8566566f91db5978b6556fdbd813b88b8672625b4

Observation 818d623b-65c6-4dae-ab2b-c7d2b3cae25d · outbound

This paper cites an unresolved cited work.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Unresolved cited work

Reference 47

Resolution
unresolved
no resolver link, observed 2026-06-26T20:47:36.337189Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:b0c7f8f56efc2f5ce63daae9076f36bea9b35c9b80ca8ac175e50d6b732d9572

Observation cbc2a353-4866-428a-b988-6a0b25275110 · outbound

This paper cites The Attacker Moves Second: Stronger Adaptive Attacks Bypass Defenses Against Llm Jailbreaks and Prompt Injections.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications The Attacker Moves Second: Stronger Adaptive Attacks Bypass Defenses Against Llm Jailbreaks and Prompt Injections

Reference 48

Resolution
verified exact
local_arxiv, observed 2026-07-04T00:59:20.677385Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:686f923201ccc871034b69876ca47f5e56841e95db1d54bf5dd2175e5f000c6e

Observation d401dd89-86b7-44ca-a7d3-6b25329a3b06 · outbound

This paper cites 2024.GPTs.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications 2024.GPTs

Reference 49

Resolution
unresolved
no resolver link, observed 2026-06-26T20:47:36.337189Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:9c69788db63402d3b5cb3e189950adbbda8184fe0e549ff59ff3a8aab2ed8fe1

Observation 330dfc4b-56b6-4f5b-9ed2-1aa7186ac1b2 · outbound

This paper cites an unresolved cited work.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Unresolved cited work

Reference 50

Resolution
unresolved
no resolver link, observed 2026-06-26T20:47:36.337189Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:0505c585820654b58f582ecab9f152ca35349b1ac741304a6986c4930ed06376

Observation 25804b1c-d72d-4047-9673-3fedf20fa8a2 · outbound

This paper cites an unresolved cited work.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Unresolved cited work

Reference 51

Resolution
unresolved
no resolver link, observed 2026-06-26T20:47:36.337189Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:338a1cfc891d22ae92cec6ff869c02376c60779a4a3fc7484d0a2e9f08c00d7c

Observation c9441acd-cdda-49d3-ad46-325ccac32332 · outbound

This paper cites Ignore Previous Prompt: Attack Techniques For Language Models.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Ignore Previous Prompt: Attack Techniques For Language Models

Reference 52

Resolution
verified exact
local_arxiv, observed 2026-07-04T00:59:20.678348Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:9b8ba9e029d2a803a5f31c52a2885b57852c03edb46f892c4e346da535a334c5

Observation f1f24637-f9eb-4d2b-8861-770f450f62e0 · outbound

This paper cites an unresolved cited work.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Unresolved cited work

Reference 53

Resolution
unresolved
no resolver link, observed 2026-06-26T20:47:36.337189Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:6e6363f1904a159c20dafa4cea652d84de2c48e12415c437e98564712697b098

Observation 3509ee17-abb0-4704-ad67-20241ed6968e · outbound

This paper cites Safety Alignment Should Be Made More Than Just a Few Tokens Deep.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Safety Alignment Should Be Made More Than Just a Few Tokens Deep

Reference 54

Resolution
verified exact
arxiv_id, observed 2026-07-04T00:59:20.668111Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:6917ee6a1d8344371523d03ae35e247554526169e563c2cf7ecfa674ce0b05b5

Observation 2e84c2b2-f205-4670-925d-5a53da0a57b8 · outbound

This paper cites 2024.Poe.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications 2024.Poe

Reference 55

Resolution
unresolved
no resolver link, observed 2026-06-26T20:47:36.337189Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:b724e9469c2f3eaf3cd18dcc4d9169f884fde7f0a02fa8a07466d9eebbb77775

Observation 4211fcd1-f37d-4bad-8912-c5e766c079c2 · outbound

This paper cites an unresolved cited work.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Unresolved cited work

Reference 56

Resolution
unresolved
no resolver link, observed 2026-06-26T20:47:36.337189Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:f904695a2c87989b6792961866751774fdeb966fe7e4349b1a078107ee40ef72

Observation efc56708-84ad-452c-923e-4daf22b4c7a5 · outbound

This paper cites an unresolved cited work.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Unresolved cited work

Reference 57

Resolution
unresolved
no resolver link, observed 2026-06-26T20:47:36.337189Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:0a02e89dc7b27847fe90b47d4146953469d39b6edabbede57e3cd7551c766835

Observation f5782f62-4696-4b0c-b7ce-bd0696b564f7 · outbound

This paper cites Massive Activations in Large Language Models.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Massive Activations in Large Language Models

Reference 58

Resolution
verified exact
local_arxiv, observed 2026-07-04T00:59:20.670950Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:aca197f534cb6bb7ef4fd2303735a6c3dc14d1151c1317592adfc2b2b180aea4

Observation e29a2dbb-dde2-49ae-a34d-990054d13bf7 · outbound

This paper cites an unresolved cited work.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Unresolved cited work

Reference 59

Resolution
unresolved
no resolver link, observed 2026-06-26T20:47:36.337189Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:860f87bccee7a51df73e1bd0c12e175d38d559c75a1ff31c70d34d44aeb2fb4d

Observation 63c245b3-f6c2-418c-b186-8b20854d1ada · outbound

This paper cites 2025.Yuanqi Agent Shop.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications 2025.Yuanqi Agent Shop

Reference 60

Resolution
unresolved
no resolver link, observed 2026-06-26T20:47:36.337189Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:05632cc56234df5030dac3fbb1650c4764bc4cde372e366026a88635c045838d

Observation 1e574be8-b467-4ff1-bfb5-cc78b23f8ba3 · outbound

This paper cites an unresolved cited work.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Unresolved cited work

Reference 61

Resolution
unresolved
no resolver link, observed 2026-06-26T20:47:36.337189Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:bbb513dbdf4bba0753a8176005464bf8c3053a3511f351765211a0d6bc2cc51e

Observation 52ef799b-89bb-406a-a7fa-345a4f2306f8 · outbound

This paper cites an unresolved cited work.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Unresolved cited work

Reference 62

Resolution
unresolved
no resolver link, observed 2026-06-26T20:47:36.337189Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:d543f6f73db4d189b1947709892426b7fb01c9271985912cd3331daec1ce7fbb

Observation 92ee5b35-a4ca-43dc-b3ee-9382059844e1 · outbound

This paper cites Willison.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Willison

Reference 63

Resolution
unresolved
no resolver link, observed 2026-06-26T20:47:36.337189Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:9d2940380d0832541353eec2b0def6c22da2795bc3c32a6b25c63066424ca14e

Observation 8f138235-6714-4249-ae36-849339ba0653 · outbound

This paper cites an unresolved cited work.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Unresolved cited work

Reference 64

Resolution
unresolved
no resolver link, observed 2026-06-26T20:47:36.337189Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:447634efb13e3ae57b8fb7690962631b26e969d269d3b833a2abf62cd8edd859

Observation 20a4b8be-8f87-487d-8de3-42c53806e4e4 · outbound

This paper cites an unresolved cited work.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Unresolved cited work

Reference 65

Resolution
unresolved
no resolver link, observed 2026-06-26T20:47:36.337189Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:5a961b45fb49d3f2a6516f86e1ddfec137c3e0eb9a2300eb4bbe21edf1c60383

Observation 9de387fa-9088-4852-b0d9-0c5adcd07de0 · outbound

This paper cites Assessing Prompt Injection Risks in 200+ Custom GPTs.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Assessing Prompt Injection Risks in 200+ Custom GPTs

Reference 66

Resolution
verified exact
arxiv_id, observed 2026-07-04T00:59:20.705055Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:46a0e69153250256a672648a8b19592d611a2c88f6cb84f821adc7dc3d6e2177

Observation d8756bd3-cbf4-44cc-9a68-ac534f5c1c58 · outbound

This paper cites an unresolved cited work.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Unresolved cited work

Reference 67

Resolution
unresolved
no resolver link, observed 2026-06-26T20:47:36.337189Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:40d39ddfe9d9b82cf5bec1a44d5e041d59036dec345784546bfa947da2add12a

Observation d9cc16ba-6afd-4338-9490-5bb763ea5a77 · outbound

This paper cites Effective Prompt Extraction from Language Models.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Effective Prompt Extraction from Language Models

Reference 68

Resolution
verified exact
arxiv_id, observed 2026-07-04T00:59:20.721166Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:f39db5ebe8500911289f5235bf95c536e67e56e9c5476e3a4a472f0ffae0bea8

Observation 278f6687-547a-49ee-b30d-38148ecd3689 · outbound

This paper cites an unresolved cited work.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Unresolved cited work

Reference 69

Resolution
unresolved
no resolver link, observed 2026-06-26T20:47:36.337189Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:22a427123771297ef62b9b4d81b4c644d54e00c2d6161fdd7ea0780048288595

Observation c6aca8dc-21a5-44c4-9161-be2d01995c18 · outbound

This paper cites Universal and Transferable Adversarial Attacks on Aligned Language Models.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Universal and Transferable Adversarial Attacks on Aligned Language Models

Reference 70

Resolution
malformed identifier
local_arxiv, observed 2026-07-04T00:59:20.725940Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:3326e5300f055abb2dbbf33866290a99e0e6bb819064e707afc3ab3b6c9b24f4

Pith citing papers

No inbound Pith citation observations are available.