Question Answering on 2WikiMultihopQA (EM/ASR)
60EMClean (No Attack)
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| Clean (No Attack)Framework=ReAct, LLM Backbone=Qwen2.5-32B-Inst2026.07 | 60 | — | |
| IgnoreFramework=WebThinker, LLM Backbone=QwQ-32B2026.07 | 59 | 1 | |
| IgnoreFramework=WebThinker, LLM Backbone=DeepSeek-32B2026.07 | 59 | 0 | |
| Clean (No Attack)Framework=WebThinker, LLM Backbone=DeepSeek-32B2026.07 | 58 | — | |
| CombinedFramework=WebThinker, LLM Backbone=DeepSeek-32B2026.07 | 58 | 0 | |
| TopicFramework=WebThinker, LLM Backbone=DeepSeek-32B2026.07 | 58 | 0 | |
| Clean (No Attack)Framework=WebThinker, LLM Backbone=QwQ-32B2026.07 | 57 | — | |
| NaiveFramework=WebThinker, LLM Backbone=QwQ-32B2026.07 | 56 | 3 | |
| NaiveFramework=WebThinker, LLM Backbone=DeepSeek-32B2026.07 | 55 | 0 | |
| Clean (No Attack)Framework=ReAct, LLM Backbone=Llama-3.3-70B-Inst2026.07 | 54 | — | |
| TopicFramework=WebThinker, LLM Backbone=QwQ-32B2026.07 | 54 | 0 | |
| CombinedFramework=WebThinker, LLM Backbone=QwQ-32B2026.07 | 53 | 3 | |
| PARADOXFramework=WebThinker, LLM Backbone=QwQ-32B2026.07 | 51 | 3 | |
| Fake CompletionFramework=WebThinker, LLM Backbone=DeepSeek-32B2026.07 | 51 | 1 | |
| Fake CompletionFramework=ReAct, LLM Backbone=Llama-3.3-70B-Inst2026.07 | 49 | 1 | |
| Fake CompletionFramework=WebThinker, LLM Backbone=QwQ-32B2026.07 | 48 | 8 | |
| NaiveFramework=ReAct, LLM Backbone=Llama-3.3-70B-Inst2026.07 | 47 | 10 | |
| PoisonedRAGFramework=ReAct, LLM Backbone=Llama-3.3-70B-Inst2026.07 | 41 | 0 | |
| PARADOXFramework=ReAct, LLM Backbone=Llama-3.3-70B-Inst2026.07 | 41 | 15 | |
| PARADOXFramework=WebThinker, LLM Backbone=DeepSeek-32B2026.07 | 38 | 10 | |
| NaiveFramework=ReAct, LLM Backbone=Qwen2.5-32B-Inst2026.07 | 37 | 33 | |
| PoisonedRAGFramework=ReAct, LLM Backbone=Qwen2.5-32B-Inst2026.07 | 37 | 2 | |
| PARADOXFramework=ReAct, LLM Backbone=Qwen2.5-32B-Inst2026.07 | 36 | 21 | |
| PoisonedRAGFramework=WebThinker, LLM Backbone=DeepSeek-32B2026.07 | 35 | 2 | |
| IgnoreFramework=ReAct, LLM Backbone=Qwen2.5-32B-Inst2026.07 | 34 | 17 | |
| CombinedFramework=ReAct, LLM Backbone=Llama-3.3-70B-Inst2026.07 | 34 | 1 | |
| PoisonedRAGFramework=WebThinker, LLM Backbone=QwQ-32B2026.07 | 34 | 2 | |
| KidnapRAGFramework=WebThinker, LLM Backbone=QwQ-32B2026.07 | 29 | 46 | |
| CombinedFramework=ReAct, LLM Backbone=Qwen2.5-32B-Inst2026.07 | 26 | 37 | |
| Fake CompletionFramework=ReAct, LLM Backbone=Qwen2.5-32B-Inst2026.07 | 24 | 53 | |
| IgnoreFramework=ReAct, LLM Backbone=Llama-3.3-70B-Inst2026.07 | 24 | 18 | |
| KidnapRAGFramework=WebThinker, LLM Backbone=DeepSeek-32B2026.07 | 20 | 39 | |
| TopicFramework=ReAct, LLM Backbone=Llama-3.3-70B-Inst2026.07 | 18 | 1 | |
| TopicFramework=ReAct, LLM Backbone=Qwen2.5-32B-Inst2026.07 | 15 | 7 | |
| KidnapRAGFramework=ReAct, LLM Backbone=Qwen2.5-32B-Inst2026.07 | 9 | 54 | |
| KidnapRAGFramework=ReAct, LLM Backbone=Llama-3.3-70B-Inst2026.07 | 9 | 62 |