# T2I Jailbreak on GPT image 2 Source: [T2I Jailbreak on GPT image 2]() Collection index: [llms.txt]() Data updated: 2026-06-24T07:40:57.876Z Evaluation of Text-to-Image (T2I) model susceptibility to jailbreak attacks using the GPT image 2 dataset, reporting Attack Success Rate (ASR). A research result applies to its stated dataset, split, metric and evaluation configuration. Compare like-for-like settings, preserve the metric's unit and direction, and distinguish paper-reported results from independent reproduction. The best result recorded here is not a claim of exhaustive, current global coverage. | Scope | Recorded value | | --- | --- | | Task | T2I Jailbreak | | Dataset (including any stated split) | GPT image 2 | | Metric | ASR | | Unit | PERCENT | | Direction | Lower is better | | Results loaded | 11 of 11 | | Coverage | All results currently returned for this benchmark | Evaluation settings may differ between results. The original papers and recorded configurations are needed to establish comparability. A shared metric name alone does not establish an identical protocol. ## Metrics - [ASR](): Lower is better; unit: PERCENT. ## Recorded results | Method | ASR | Result date | Report paper | | --- | --- | --- | --- | | SneakyPrompt | 0 | Not recorded | 6a3b647c206542251d7c9622 | | DiffZOO | 0 | Not recorded | 6a3b647c206542251d7c9622 | | PGJ | 0 | Not recorded | 6a3b647c206542251d7c9622 | | MMA | 0.8 | Not recorded | 6a3b647c206542251d7c9622 | | JailFuzzer | 1.1 | Not recorded | 6a3b647c206542251d7c9622 | | Low-Effort | 1.9 | Not recorded | 6a3b647c206542251d7c9622 | | DACA | 2.4 | Not recorded | 6a3b647c206542251d7c9622 | | HTS | 2.7 | Not recorded | 6a3b647c206542251d7c9622 | | Ring-A-Bell | 3.1 | Not recorded | 6a3b647c206542251d7c9622 | | JPA | 3.3 | Not recorded | 6a3b647c206542251d7c9622 | | R2A | 3.9 | Not recorded | 6a3b647c206542251d7c9622 | ### SneakyPrompt ASR: 0. Result ID: 6a3b89eefbc373592c43cbb2. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: Not recorded. This record does not assert independent reproduction. ### DiffZOO ASR: 0. Result ID: 6a3b89eefbc373592c43cbb7. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: Not recorded. This record does not assert independent reproduction. ### PGJ ASR: 0. Result ID: 6a3b89eefbc373592c43cbb8. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: Not recorded. This record does not assert independent reproduction. ### MMA ASR: 0.8. Result ID: 6a3b89eefbc373592c43cbb3. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: Not recorded. This record does not assert independent reproduction. ### JailFuzzer ASR: 1.1. Result ID: 6a3b89eefbc373592c43cbb6. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: Not recorded. This record does not assert independent reproduction. ### Low-Effort ASR: 1.9. Result ID: 6a3b89eefbc373592c43cbba. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: Not recorded. This record does not assert independent reproduction. ### DACA ASR: 2.4. Result ID: 6a3b89eefbc373592c43cbb4. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: Not recorded. This record does not assert independent reproduction. ### HTS ASR: 2.7. Result ID: 6a3b89eefbc373592c43cbbc. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: Not recorded. This record does not assert independent reproduction. ### Ring-A-Bell ASR: 3.1. Result ID: 6a3b89eefbc373592c43cbb5. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: Not recorded. This record does not assert independent reproduction. ### JPA ASR: 3.3. Result ID: 6a3b89eefbc373592c43cbbb. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: Not recorded. This record does not assert independent reproduction. ### R2A ASR: 3.9. Result ID: 6a3b89eefbc373592c43cbb9. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: Not recorded. This record does not assert independent reproduction. Page 1 of 1. This is an index page, not the full collection.