List your company
ResearchFormerly WizWand

Adversarial Attack Transferability on LLM Cascades Evaluation Set Open-Source Models

91.5AccuracyInitial cascade
46.2658.00569.7581.495May 17, 2026
Updated 5mo ago

Evaluation results

MethodLinks
Initial cascadeSetting=(8), Model Component=DM (g1)2026.0591.5—
Initial cascadeSetting=(8), Model Component=LLM (f3)2026.0591104.1
Initial cascadeSetting=(24), Model Component=LLM (f3)2026.0591104.1
Initial cascadeSetting=(25), Model Component=LLM (f3)2026.0591104.1
Initial cascadeSetting=(24), Model Component=DM (g2)2026.0590—
Initial cascadeSetting=(8), Model Component=Cascade (Φ)2026.058941.2
Initial cascadeSetting=(24), Model Component=DM (g1)2026.0588—
Initial cascadeSetting=(25), Model Component=Cascade (Φ)2026.058826.8
Initial cascadeSetting=(24), Model Component=Cascade (Φ)2026.0587.521.4
Initial cascadeSetting=(29), Model Component=DM (g2)2026.0587.5—
Initial cascadeSetting=(19), Target Component=DM (g2)2026.0587.5—
Initial cascadeSetting=(25), Model Component=DM (g1)2026.0587—
Initial cascadeSetting=(1), Model Component=DM (g1)2026.0586.5—
Initial cascadeSetting=(1), Target Component=DM (g1)2026.0586.5—
Initial cascadeSetting=(27), Model Component=DM (g2)2026.0585.5—
Initial cascadeSetting=(17), Target Component=DM (g2)2026.0585.5—
Initial cascadeSetting=(24), Model Component=SLM (f2)2026.0584.513.7
Initial cascadeSetting=(25), Model Component=SLM (f2)2026.0584.513.7
Initial cascadeSetting=(25), Model Component=DM (g2)2026.0584.5—
Joint-target AttackSource Setting=(8), Target Setting=(8), Suffix Length p=0, Model Component=LLM (f3)2026.0584104.5
Joint-target AttackSource Setting=(8), Target Setting=(24), Suffix Length p=0, Model Component=LLM (f3)2026.0584104.5
Joint-target AttackSource Setting=(8), Target Setting=(25), Suffix Length p=0, Model Component=LLM (f3)2026.0584104.7
Initial cascadeSetting=(28), Model Component=LLM (f3)2026.058449.8
Initial cascadeSetting=(29), Model Component=LLM (f3)2026.058449.8
Initial cascadeSetting=(18), Target Component=LLM (f3)2026.05849,967.4
Initial cascadeSetting=(19), Target Component=LLM (f3)2026.05849,967.4
Initial cascadeSetting=(26), Model Component=DM (g2)2026.0583.5—
Initial cascadeSetting=(28), Model Component=DM (g2)2026.0583.5—
Initial cascadeSetting=(16), Target Component=DM (g2)2026.0583.5—
Initial cascadeSetting=(18), Target Component=DM (g2)2026.0583.5—
Initial cascadeSetting=(27), Model Component=DM (g1)2026.0582—
Initial cascadeSetting=(17), Target Component=DM (g1)2026.0582—
Initial cascadeSetting=(26), Model Component=DM (g1)2026.0581—
Initial cascadeSetting=(16), Target Component=DM (g1)2026.0581—
Initial cascadeSetting=(29), Model Component=DM (g1)2026.0580.5—
Initial cascadeSetting=(19), Target Component=DM (g1)2026.0580.5—
Joint-target AttackSource Setting=(8), Target Setting=(24), Suffix Length p=0, Model Component=SLM (f2)2026.0578.513.8
Joint-target AttackSource Setting=(8), Target Setting=(25), Suffix Length p=0, Model Component=SLM (f2)2026.0578.513.8
Initial cascadeSetting=(1), Model Component=Cascade (Φ)2026.057810.37
Initial cascadeSetting=(28), Model Component=Cascade (Φ)2026.057811.4
Initial cascadeSetting=(1), Target Component=Cascade (Φ)2026.05782,771.9
Initial cascadeSetting=(18), Target Component=Cascade (Φ)2026.05782,272.8
Initial cascadeSetting=(26), Model Component=Cascade (Φ)2026.057712.5
Initial cascadeSetting=(29), Model Component=Cascade (Φ)2026.057711.4
Initial cascadeSetting=(16), Target Component=Cascade (Φ)2026.05772,490.4
Initial cascadeSetting=(19), Target Component=Cascade (Φ)2026.05772,281.4
Initial cascadeSetting=(27), Model Component=Cascade (Φ)2026.0576.512
Initial cascadeSetting=(28), Model Component=DM (g1)2026.0576.5—
Initial cascadeSetting=(17), Target Component=Cascade (Φ)2026.0576.52,398.6
Initial cascadeSetting=(18), Target Component=DM (g1)2026.0576.5—
Initial cascadeSetting=(1), Model Component=LLM (f3)2026.057625.19
Initial cascadeSetting=(26), Model Component=LLM (f3)2026.057625.2
Initial cascadeSetting=(1), Target Component=LLM (f3)2026.05765,037.3
Initial cascadeSetting=(16), Target Component=LLM (f3)2026.05765,037.3
Initial cascadeSetting=(27), Model Component=LLM (f3)2026.057325.2
Joint-target AttackSource Setting=(1), Target Setting=(28), Suffix Length p=0, Model Component=LLM (f3)2026.057350.7
Joint-target AttackSource Setting=(1), Target Setting=(29), Suffix Length p=0, Model Component=LLM (f3)2026.057350.7
Initial cascadeSetting=(17), Target Component=LLM (f3)2026.05735,037.3
Joint-target AttackSetting=(18), Attack Source=(1), Target Component=LLM (f3)2026.057310,942.7
Joint-target AttackSetting=(19), Attack Source=(1), Target Component=LLM (f3)2026.057310,942.7
Initial cascadeSetting=(28), Model Component=SLM (f2)2026.0572.54.3
Initial cascadeSetting=(29), Model Component=SLM (f2)2026.0572.54.3
Initial cascadeSetting=(18), Target Component=SLM (f2)2026.0572.5856.5
Initial cascadeSetting=(19), Target Component=SLM (f2)2026.0572.5856.5
Initial cascadeSetting=(8), Model Component=SLM (f1)2026.05713.4
Initial cascadeSetting=(24), Model Component=SLM (f1)2026.05713.4
Initial cascadeSetting=(25), Model Component=SLM (f1)2026.05713.4
Joint-target AttackSource Setting=(8), Target Setting=(25), Suffix Length p=0, Model Component=Cascade (Φ)2026.0569.514.9
Joint-target AttackSource Setting=(8), Target Setting=(24), Suffix Length p=0, Model Component=Cascade (Φ)2026.0567.512.6
Joint-target AttackSource Setting=(1), Target Setting=(28), Suffix Length p=0, Model Component=DM (g2)2026.0567—
Joint-target AttackSetting=(18), Attack Source=(1), Target Component=DM (g2)2026.0567—
Joint-target AttackSource Setting=(8), Target Setting=(24), Suffix Length p=0, Model Component=DM (g2)2026.0565—
Joint-target AttackSource Setting=(1), Target Setting=(1), Suffix Length p=0, Model Component=LLM (f3)2026.056325.47
Joint-target AttackSource Setting=(8), Target Setting=(25), Suffix Length p=0, Model Component=DM (g2)2026.0563—
Joint-target AttackSource Setting=(1), Target Setting=(26), Suffix Length p=0, Model Component=LLM (f3)2026.056325.6
Joint-target AttackSource Setting=(1), Target Setting=(27), Suffix Length p=0, Model Component=LLM (f3)2026.056325.6
Joint-target AttackSetting=(1), Attack Source=(1), Target Component=LLM (f3)2026.05635,728.5
Joint-target AttackSetting=(16), Attack Source=(1), Target Component=LLM (f3)2026.05635,728.5
Joint-target AttackSetting=(17), Attack Source=(1), Target Component=LLM (f3)2026.05635,728.5
Joint-target AttackSource Setting=(1), Target Setting=(28), Suffix Length p=0, Model Component=SLM (f2)2026.0561.54.4
Joint-target AttackSource Setting=(1), Target Setting=(29), Suffix Length p=0, Model Component=SLM (f2)2026.0561.54.4
Joint-target AttackSetting=(18), Attack Source=(1), Target Component=SLM (f2)2026.0561.5878.7
Joint-target AttackSetting=(19), Attack Source=(1), Target Component=SLM (f2)2026.0561.5878.7
Joint-target AttackSource Setting=(1), Target Setting=(28), Suffix Length p=0, Model Component=Cascade (Φ)2026.05619
Joint-target AttackSource Setting=(1), Target Setting=(29), Suffix Length p=0, Model Component=DM (g2)2026.0561—
Joint-target AttackSetting=(18), Attack Source=(1), Target Component=Cascade (Φ)2026.05611,794.3
Joint-target AttackSetting=(19), Attack Source=(1), Target Component=DM (g2)2026.0561—
Joint-target AttackSource Setting=(1), Target Setting=(29), Suffix Length p=0, Model Component=Cascade (Φ)2026.0559.510.1
Joint-target AttackSetting=(19), Attack Source=(1), Target Component=Cascade (Φ)2026.0559.52,017.5
Initial cascadeSetting=(26), Model Component=SLM (f2)2026.0554.52
Initial cascadeSetting=(27), Model Component=SLM (f2)2026.0554.52
Initial cascadeSetting=(16), Target Component=SLM (f2)2026.0554.5402.2
Initial cascadeSetting=(17), Target Component=SLM (f2)2026.0554.5402.2
Joint-target AttackSource Setting=(8), Target Setting=(8), Suffix Length p=0, Model Component=Cascade (Φ)2026.0552.518.4
Joint-target AttackSource Setting=(8), Target Setting=(8), Suffix Length p=0, Model Component=SLM (f1)2026.05503.4
Joint-target AttackSource Setting=(8), Target Setting=(24), Suffix Length p=0, Model Component=SLM (f1)2026.05503.4
Joint-target AttackSource Setting=(8), Target Setting=(25), Suffix Length p=0, Model Component=SLM (f1)2026.05503.4
Joint-target AttackSource Setting=(1), Target Setting=(28), Suffix Length p=0, Model Component=DM (g1)2026.0548.5—
Joint-target AttackSetting=(18), Attack Source=(1), Target Component=DM (g1)2026.0548.5—
Initial cascadeSetting=(1), Model Component=SLM (f1)2026.05480.51