Jailbreak Attack on SDXL
96.7ASR (%)DACA
Evaluation results
| Method | Links | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| DACA2026.06 | 96.7 | — | — | — | — | — | — | — | — | — | |
| R2A2026.06 | 91.7 | — | — | — | — | — | — | — | — | — | |
| Low-Effort2026.06 | 91.1 | — | — | — | — | — | — | — | — | — | |
| PGJ2026.06 | 86.7 | — | — | — | — | — | — | — | — | — | |
| HTS2026.06 | 75.7 | — | — | — | — | — | — | — | — | — | |
| JailFuzzer2026.06 | 67.4 | — | — | — | — | — | — | — | — | — | |
| DiffZOO2026.06 | 66.9 | — | — | — | — | — | — | — | — | — | |
| Ring-A-Bell2026.06 | 60.2 | — | — | — | — | — | — | — | — | — | |
| SneakyPrompt2026.06 | 58.6 | — | — | — | — | — | — | — | — | — | |
| JPA2026.06 | 53 | — | — | — | — | — | — | — | — | — | |
| MMA2026.06 | 52.7 | — | — | — | — | — | — | — | — | — | |
| JANUSModel=SDXL2026.03 | — | 94.25 | 25.98 | 51.07 | 64.83 | 23.15 | 46.3 | 58.2 | 0.47 | 0.39 | |
| MMAModel=SDXL2026.03 | — | 7.65 | 23.9 | 48.55 | 61.1 | 2.1 | 4 | 4.85 | 0.43 | 0.32 | |
| MMPModel=SDXL2026.03 | — | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | |
| PGJModel=SDXL2026.03 | — | 32.75 | 14.47 | 33.98 | 46.88 | 5.9 | 14.9 | 19.95 | 0.39 | 0.31 | |
| QFAModel=SDXL2026.03 | — | 37 | 25.1 | 49.25 | 62 | 9.63 | 16.4 | 24.26 | 0.41 | 0.35 | |
| SneakyPromptModel=SDXL2026.03 | — | 34 | 21.73 | 46.83 | 52.74 | 8.42 | 15.28 | 18.49 | 0.38 | 0.29 |