{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:ZY5SKNCJ3H6U3HZLQ633CE54LQ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"24a78956a66a1a8c07e83a9f6d408e0edaa4963142d51793fcd64b9b4334741e","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-01-04T20:18:33Z","title_canon_sha256":"9cc73c1913833efc1dc0de02238441bdc267133832eb1de3cb08072b3225e65e"},"schema_version":"1.0","source":{"id":"2501.02373","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2501.02373","created_at":"2026-07-05T10:37:42Z"},{"alias_kind":"arxiv_version","alias_value":"2501.02373v2","created_at":"2026-07-05T10:37:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2501.02373","created_at":"2026-07-05T10:37:42Z"},{"alias_kind":"pith_short_12","alias_value":"ZY5SKNCJ3H6U","created_at":"2026-07-05T10:37:42Z"},{"alias_kind":"pith_short_16","alias_value":"ZY5SKNCJ3H6U3HZL","created_at":"2026-07-05T10:37:42Z"},{"alias_kind":"pith_short_8","alias_value":"ZY5SKNCJ","created_at":"2026-07-05T10:37:42Z"}],"graph_snapshots":[{"event_id":"sha256:56c083e187a110008350232bb379dc297127fbaf2d5e702edbea2dc3ca06b7cb","target":"graph","created_at":"2026-07-05T10:37:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2501.02373/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Task arithmetic in large-scale pre-trained models enables agile adaptation to diverse downstream tasks without extensive retraining. By leveraging task vectors (TVs), users can perform modular updates through simple arithmetic operations like addition and subtraction. Yet, this flexibility presents new security challenges. In this paper, we investigate how TVs are vulnerable to backdoor attacks, revealing how malicious actors can exploit them to compromise model integrity. By creating composite backdoors that are designed asymmetrically, we introduce BadTV, a backdoor attack specifically craft","authors_text":"Chia-Mu Yu, Chia-Yi Hsu, Chih-Hsun Lin, Chun-Ying Huang, Jun Sakuma, Yang Zhang, Yan-Lun Chen, Yu-Lin Tsai, Yu Zhe","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-01-04T20:18:33Z","title":"BADTV: Unveiling Backdoor Threats in Third-Party Task Vectors"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2501.02373","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f0666426c4a3d337b21a26a448a30d496c050cb03d462a52fb3017b614e8004e","target":"record","created_at":"2026-07-05T10:37:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"24a78956a66a1a8c07e83a9f6d408e0edaa4963142d51793fcd64b9b4334741e","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-01-04T20:18:33Z","title_canon_sha256":"9cc73c1913833efc1dc0de02238441bdc267133832eb1de3cb08072b3225e65e"},"schema_version":"1.0","source":{"id":"2501.02373","kind":"arxiv","version":2}},"canonical_sha256":"ce3b253449d9fd4d9f2b87b7b113bc5c23630db28b3956ef7c2d7c4b701ba3df","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ce3b253449d9fd4d9f2b87b7b113bc5c23630db28b3956ef7c2d7c4b701ba3df","first_computed_at":"2026-07-05T10:37:42.018279Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:37:42.018279Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ikWVtiAJ3ZBBXIcTF35IoeDL1CnXGd5ej2lcOaih/7LFDo0G8Pu19Jqk7nb0RaDR0QVJHDPWN+QKbSIs69tWAw==","signature_status":"signed_v1","signed_at":"2026-07-05T10:37:42.018860Z","signed_message":"canonical_sha256_bytes"},"source_id":"2501.02373","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f0666426c4a3d337b21a26a448a30d496c050cb03d462a52fb3017b614e8004e","sha256:56c083e187a110008350232bb379dc297127fbaf2d5e702edbea2dc3ca06b7cb"],"state_sha256":"cf85541b84c28289a9037fd419192f484c1285ed15b16fc645c4e119501cfd7f"}