# T2I Jailbreak on SD 1.5 Source: [T2I Jailbreak on SD 1.5]() Collection index: [llms.txt]() Data updated: 2026-06-24T07:40:57.843Z Evaluation of the SD 1.5 model's resistance to Text-to-Image (T2I) jailbreak prompts, measured using Attack Success Rate (ASR). A research result applies to its stated dataset, split, metric and evaluation configuration. Compare like-for-like settings, preserve the metric's unit and direction, and distinguish paper-reported results from independent reproduction. The best result recorded here is not a claim of exhaustive, current global coverage. | Scope | Recorded value | | --- | --- | | Task | T2I Jailbreak | | Dataset (including any stated split) | SD 1.5 | | Metric | ASR | | Unit | PERCENT | | Direction | Higher is better | | Results loaded | 11 of 11 | | Coverage | All results currently returned for this benchmark | Evaluation settings may differ between results. The original papers and recorded configurations are needed to establish comparability. A shared metric name alone does not establish an identical protocol. ## Metrics - [ASR](): Higher is better; unit: PERCENT. ## Recorded results | Method | ASR | Result date | Report paper | | --- | --- | --- | --- | | DACA | 95 | Not recorded | 6a3b647c206542251d7c9622 | | R2A | 92.3 | Not recorded | 6a3b647c206542251d7c9622 | | PGJ | 69.6 | Not recorded | 6a3b647c206542251d7c9622 | | HTS | 64.1 | Not recorded | 6a3b647c206542251d7c9622 | | Low-Effort | 63.1 | Not recorded | 6a3b647c206542251d7c9622 | | MMA | 59.7 | Not recorded | 6a3b647c206542251d7c9622 | | DiffZOO | 59.1 | Not recorded | 6a3b647c206542251d7c9622 | | JailFuzzer | 55.2 | Not recorded | 6a3b647c206542251d7c9622 | | SneakyPrompt | 54.7 | Not recorded | 6a3b647c206542251d7c9622 | | Ring-A-Bell | 50.3 | Not recorded | 6a3b647c206542251d7c9622 | | JPA | 50 | Not recorded | 6a3b647c206542251d7c9622 | ### DACA ASR: 95. Result ID: 6a3b89eefbc373592c43cb9e. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: Not recorded. This record does not assert independent reproduction. ### R2A ASR: 92.3. Result ID: 6a3b89eefbc373592c43cba3. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: Not recorded. This record does not assert independent reproduction. ### PGJ ASR: 69.6. Result ID: 6a3b89eefbc373592c43cba2. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: Not recorded. This record does not assert independent reproduction. ### HTS ASR: 64.1. Result ID: 6a3b89eefbc373592c43cba6. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: Not recorded. This record does not assert independent reproduction. ### Low-Effort ASR: 63.1. Result ID: 6a3b89eefbc373592c43cba4. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: Not recorded. This record does not assert independent reproduction. ### MMA ASR: 59.7. Result ID: 6a3b89eefbc373592c43cb9d. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: Not recorded. This record does not assert independent reproduction. ### DiffZOO ASR: 59.1. Result ID: 6a3b89eefbc373592c43cba1. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: Not recorded. This record does not assert independent reproduction. ### JailFuzzer ASR: 55.2. Result ID: 6a3b89eefbc373592c43cba0. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: Not recorded. This record does not assert independent reproduction. ### SneakyPrompt ASR: 54.7. Result ID: 6a3b89eefbc373592c43cb9c. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: Not recorded. This record does not assert independent reproduction. ### Ring-A-Bell ASR: 50.3. Result ID: 6a3b89eefbc373592c43cb9f. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: Not recorded. This record does not assert independent reproduction. ### JPA ASR: 50. Result ID: 6a3b89eefbc373592c43cba5. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: Not recorded. This record does not assert independent reproduction. Page 1 of 1. This is an index page, not the full collection.