Blind PRNG Hijacking
“Across three watermarking schemes and three open-source LLMs, the attack triggers 0/6 state-of-the-art content-side statistical detectors while inflating the watermark z-score up to 2.42x (system-level defenses such as entropy-source attestation remain orthogonal and complementary).”
The authors, in the abstract
An Undetectable Integrity-Preserving Attack Against LLM Watermarking