Jailbreaking on HarmBench Textual Cipher
74.8ASR (K=1)Gemini 3 Flash
Evaluation results
| Method | Links | ||
|---|---|---|---|
| Gemini 3 Flash2026.05 | 74.8 | 89.3 | |
| Qwen3-VL-235B2026.05 | 70.4 | 86.8 | |
| Qwen3-VL-32B2026.05 | 58.5 | 84.9 | |
| Gemini 3.1 Pro2026.05 | 7.5 | 15.1 | |
| Claude Haiku 4.52026.05 | 4.4 | 10.7 | |
| GPT-5.22026.05 | 1.9 | 5.7 |