ResearchBenchmarksBackdoor Attack Mitigation on Llama Format-noisy adaptive attackFollow2ASRPatcher-1.7623.624974.38Jun 2, 2026Evaluation ResultsMethodMethodLinksASRAccuracyPatcher2026.06294Mudjacking2026.068494BAERASER2026.068893OneShot2026.069194ROME2026.069193SPP2026.069294FT2026.069494FTConstraint=linfConstraint=linf2026.069494FinePruning2026.069494MEND2026.069494FTConstraint=l2Constraint=l22026.069594Unpatched2026.069694