Jailbreak
Benchmarks
DatasetSOTA methodMetricTrendResultsLast updated
2.1Avg Queries
119
Jun 5, 2026
87Jailbreak Success Rate
72
Apr 16, 2026
0Jailbreak Rate
70
Feb 26, 2026
99.8Jailbreak Rate
70
Feb 26, 2026
100ASR
64
Jun 11, 2026
1.01Toxicity Score
50
May 20, 2026
0ASR
48
Feb 26, 2026
95.7ASR (Jailbreak Scenario)
42
May 15, 2026
2ASR@1
33
May 12, 2026
95.15ASR@1
33
May 12, 2026
90.57ASR@1
33
May 12, 2026
0Attack Success Rate (ASR)
25
Feb 26, 2026
65.5MMLU
20
Feb 26, 2026
80Attack Success Rate (ASR)
18
May 26, 2026
91.35ASR (GPT-3.5 Turbo)
16
May 18, 2026
1.43Harmfulness Score (HS)
15
Feb 26, 2026
4.6Harmfulness Score (HS)
15
Feb 26, 2026
1.08Harmfulness Score (HS)
15
Feb 26, 2026
980HF (BE)
13
Feb 26, 2026
96.1ASR (GPT-4o)
12
Apr 14, 2026
99.2ASR (GPT-4o)
12
Apr 14, 2026
99.1ASR (GPT-4o)
12
Apr 14, 2026
95.83Attack Success Rate (ASR)
12
Mar 4, 2026
94.4GPT-4o Jailbreak Success Rate
11
Jun 5, 2026
10.8Time per Successful Attack (s)
7
May 20, 2026