The Lipschitz Constant of Self-Attention
Not on the map. Why?
Abstract (arXiv)
Lipschitz constants of neural networks have been explored in various contexts in deep learning, such as provable adversarial robustness, estimating Wasserstein distance, stabilising training of GANs, and formulating invertible neural networks. Such works have focused on bounding the Lipschitz constant of fully connected or convolutional networks, composed of linear maps and pointwise non-linearities. In this paper, we investigate the Lipschitz constant of self-attention, a non-linear neural network module widely used in sequence modelling. We prove that the standard dot-product self-attention is not Lipschitz for unbounded input domain, and propose an alternative L2 self-attention that is Lipschitz. We derive an upper bound on the Lipschitz constant of L2 self-attention and provide empirical evidence for its asymptotic tightness. To demonstrate the practical relevance of our theoretical work, we formulate invertible self-attention and use it in a Transformer-based architecture for a character-level language modelling task.
Key facts. Cited by 171 papers in the map (data through 7 Oct 2026). First posted on arXiv 8 Jun 2020.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 16; 2022: 13; 2023: 23; 2024: 29; 2025: 40; 2026: 50.
171 papers.
Sort:
By area:
- 2023One Fits All:Power General Time Series Analysis by Pretrained LMcited by 615
- 2023Scaling up GANs for Text-to-Image Synthesiscited by 492
- 2021Attention is Not All You Need: Pure Attention Loses Rank Doubly Exponentially with Depthcited by 411
- 2024SDXL-Lightning: Progressive Adversarial Diffusion Distillationcited by 258
- 2021Deep Generative Modelling: A Comparative Review of VAEs, GANs, Normalizing Flows, Energy-Based and Autoregressive Modelscited by 251
- 2021Rethinking Space-Time Networks with Improved Memory Coverage for Efficient Video Object Segmentationcited by 200
- 2021Inductive Biases and Variable Creation in Self-Attention Mechanismscited by 144
- 2022On The Computational Complexity of Self-Attentioncited by 137
- 2021Sinkformers: Transformers with Doubly Stochastic Attentioncited by 136
- 2022Anti-Oversmoothing in Deep Vision Transformers via the Fourier Domain Analysis: From Theory to Practicecited by 136
- 2024Machine Unlearning of Pre-trained Large Language Modelscited by 118
- 2021ViTGAN: Training GANs with Vision Transformerscited by 110
38 more
- 2023A Theoretical Understanding of Shallow Vision Transformers: Learning, Generalization, and Sample Complexitycited by 77
- 2025Whoever Started the Interference Should End It: Guiding Data-Free Model Merging via Task Vectorscited by 59
- 2023Max-Margin Token Selection in Attention Mechanismcited by 57
- 2022Reachability Constrained Reinforcement Learningcited by 52
- 2023Decoder-Only or Encoder-Decoder? Interpreting Language Model as a Regularized Encoder-Decodercited by 44
- 2023How Smooth Is Attention?cited by 44
- 2024SAMformer: Unlocking the Potential of Transformers in Time Series Forecasting with Sharpness-Aware Minimization and Channel-Wise Attentioncited by 43
- 2022On the Effectiveness of Lipschitz-Driven Rehearsal in Continual Learningcited by 39
- 2026HDPO: Hybrid Distillation Policy Optimization via Privileged Self-Distillationcited by 39
- 2021Lipschitz Normalization for Self-Attention Layers with Application to Graph Neural Networkscited by 38
- 2022Automated Progressive Learning for Efficient Training of Vision Transformerscited by 36
- 2025KVCOMM: Online Cross-context KV-cache Communication for Efficient LLM-based Multi-agent Systemscited by 35
- 2024Learning Continually by Spectral Regularizationcited by 34
- 2023LipsFormer: Introducing Lipschitz Continuity to Vision Transformerscited by 33
- 2021Pay attention to your loss: understanding misconceptions about 1-Lipschitz neural networkscited by 30
- 2022Unraveling Attention via Convex Duality: Analysis and Interpretations of Vision Transformerscited by 30
- 2023Universality and Limitations of Prompt Tuningcited by 30
- 2023AdaLomo: Low-memory Optimization with Adaptive Learning Ratecited by 30
- 2023Some Fundamental Aspects about Lipschitz Continuity of Neural Networkscited by 25
- 2022Neural Integral Equationscited by 23
- 2025Spiking Vision Transformer with Saccadic Attentioncited by 21
- 2026Fixed-Point Reasoners: Stable and Adaptive Deep Looped Transformerscited by 21
- 2023Implicit regularization of deep residual networks towards neural ODEscited by 20
- 2025Training Transformers with Enforced Lipschitz Constantscited by 18
- 2025Softmax is 1/2-Lipschitz: A tight bound across all ℓp normscited by 18
- 2025Terminal Velocity Matchingcited by 17
- 2021LipBaB: Computing exact Lipschitz constant of ReLU networkscited by 16
- 2021Existence, Stability and Scalability of Orthogonal Convolutional Neural Networkscited by 16
- 2024Law of Vision Representation in MLLMscited by 16
- 2023Mitigating Transformer Overconfidence via Lipschitz Regularizationcited by 15
- 2024Bridging The Gap between Low-rank and Orthogonal Adaptation via Householder Reflection Adaptationcited by 15
- 2021Controlling Wasserstein Distances by Kernel Norms with Application to Compressive Statistical Learningcited by 13
- 2023Unlocking Deterministic Robustness Certification on ImageNetcited by 13
- 2023Exploring Sparse MoE in GANs for Text-conditioned Image Synthesiscited by 13
- 2025T-SHIRT: Token-Selective Hierarchical Data Selection for Instruction Tuningcited by 12
- 2022Semi-Discrete Normalizing Flows through Differentiable Tessellationcited by 11
- 2023Reversible Graph Neural Network-based Reaction Distribution Learning for Multiple Appropriate Facial Reactions Generationcited by 11
- 2025Pay Attention to Attention Distribution: A New Local Lipschitz Bound for Transformerscited by 10
50 most cited of 171 All 171 (JSON)
- 2026Later Is Better: Token Reduction for ViTs Under Distribution Shift6 Oct 2026
- 2026Exploring Weaknesses of Generative Image Watermarks against Latent Frequency Masking1 Oct 2026
- 2026ATI-VLA: Action-Centric Predictive Vision-Language-Action Models via Actionable Alignment Then Adaptive Injection1 Oct 2026
- 2026When Can Prefixes Compile LoRA? Exact Resource-Capped Tests for Frozen Attention29 Sep 2026
- 2026Universal Approximation of Measure-to-Measure Operators by Pushforwards28 Sep 2026
- 2026Reference-Tail Trust:Certified Probability Floors for Learned Updates Inside a Deployed Network28 Sep 2026
- 2026General Quantification of Covariate and Concept Shifts10 Sep 2026
- 2026Spectral-Guided Diffusion: Accelerating Inference via Static Spectral Layer Scheduling24 Aug 2026
- 2026Certified Mechanistic Interpretability: Lifting Single-Input Findings to Bounded Neighbourhoods17 Aug 2026
- 2026Corrupting Attention: Evasion-Based Adversarial Attacks on Encoder Attention in Detection Transformers7 Aug 2026
- 2026EulerLoRA: Rank-Driven Jump Dynamics for Calibrated Parameter-Efficient Fine-Tuning2 Aug 2026
- 2026StraightDP: Geometry-Aware Differential Privacy for Rectified-Flow Transformers31 Jul 2026
38 more
- 2026Efficient LLM Adversarial Training via Low-Rank Defense and Circuit-Guided Surrogates31 Jul 2026
- 2026Attacking Graph Foundation Models Through Their Shared Representation20 Jul 2026
- 2026Sharp Stability Threshold and Certification for Designing Stable Residual Architectures16 Jul 2026
- 2026Extreme Meta-Classification for Large-Scale Zero-Shot Retrieval23 Jun 2026
- 2026MKEvolve: A Modular Multi-Agent Framework for Kernel Code Generation20 Jun 2026
- 2026Fixed-Point Reasoners: Stable and Adaptive Deep Looped Transformers16 Jun 2026
- 2026When Attribution Patching Lies: Diagnosis and a Second-Order Correction5 Jun 2026
- 2026Semantic Cache Distillation: Efficient State Transfer via Reuse and Selective Patching5 Jun 2026
- 2026Improving Adversarial Robustness of Attribution via Implicit Regularization28 May 2026
- 2026Harnessing non-adversarial robustness in large language models28 May 2026
- 2026When and How Human Curation Backfires: Preference Alignment under Multi-Model Self-Consuming Loop28 May 2026
- 2026Geometry-Aware Contrastive Learning for Few-Shot Automatic Modulation Recognition26 May 2026
- 2026Polynomial Context-Truncation Sensitivity in Autoregressive Language Models: Sequential Wyner-Ziv Bounds for KV Cache Compression24 May 2026
- 2026How Many Different Outputs Can a Transformer Generate?21 May 2026
- 2026Multi-Headed Transformer Architectures as Time-dependent Wasserstein Gradient Flows15 May 2026
- 2026Fitting Is Not Enough: Smoothness in Extremely Quantized LLMs9 May 2026
- 2026Decentralized Diffusion Policy Learning for Enhanced Exploration in Cooperative Multi-agent Reinforcement Learning8 May 2026
- 2026A Nonlinear Singular Value Theory for Neural Networks7 May 2026
- 2026Better Models, Faster Training: Sigmoid Attention for single-cell Foundation Models29 Apr 2026
- 2026Explanation of Dynamic Physical Field Predictions using WassersteinGrad: Application to Autoregressive Weather Forecasting24 Apr 2026
- 2026Rethinking Intrinsic Dimension Estimation in Neural Representations22 Apr 2026
- 2026Algebraic Invariants of Lightning Self-Attention17 Apr 2026
- 2026Bridging MARL to SARL: An Order-Independent Multi-Agent Transformer via Latent Consensus15 Apr 2026
- 2026Rethinking the Personalized Relaxed Initialization in the Federated Learning: Consistency and Generalization14 Apr 2026
- 2026Sinkhorn doubly stochastic attention rank decay analysis9 Apr 2026
- 2026Information-Theoretic Limits of Safety Verification for Self-Improving Systems30 Mar 2026
- 2026HDPO: Hybrid Distillation Policy Optimization via Privileged Self-Distillation25 Mar 2026
- 2026LipsAM: Lipschitz-Continuous Amplitude Modifier for Audio Signal Processing and its Application to Plug-and-Play Dereverberation23 Mar 2026
- 2026On the Expressive Power of Transformers for Maxout Networks and Continuous Piecewise Linear Functions3 Mar 2026
- 2026The Price of Robustness: Stable Classifiers Need Overparameterization3 Mar 2026
- 2026Exact Attention Sensitivity and the Geometry of Transformer Stability21 Feb 2026
- 2026Approximation Theory for Lipschitz Continuous Transformers17 Feb 2026
- 2026MoE-SpAc: Efficient MoE Inference Based on Speculative Activation Utility in Heterogeneous Edge Scenarios12 Feb 2026
- 2026Tight Long-Term Tail Decay of (Clipped) SGD in Non-Convex Optimization5 Feb 2026
- 2026CoT is Not the Chain of Truth: An Empirical Internal Analysis of Reasoning LLMs for Fake News Generation4 Feb 2026
- 2026LLM-Inspired Pretrain-Then-Finetune for Small-Data, Large-Scale Optimization3 Feb 2026
- 2026Mind the Gap No More: Achieving Zero-Gap Multimodal Integration via One Tokenizer21 Jan 2026
- 2026Energy-Entropy Regularization: The True Power of Minimal Looped Transformers14 Jan 2026
50 newest of 171 All 171 (JSON)
- 2024SDXL-Lightning: Progressive Adversarial Diffusion Distillationcited by 258
- 2025Terminal Velocity Matchingcited by 17
- 2024Efficient Training of Large Vision Models via Advanced Automated Progressive Learningcited by 4
- 2024Efficient generative adversarial networks using linear additive-attention Transformerscited by 2
- 2026Decentralized Diffusion Policy Learning for Enhanced Exploration in Cooperative Multi-agent Reinforcement Learningcited by 1
- 2024Improving Fine-Grained Control via Aggregation of Multiple Diffusion Modelscited by 0
- 2025Gaussian Universality for Diffusion Modelscited by 0
- 2026Spectral-Guided Diffusion: Accelerating Inference via Static Spectral Layer Schedulingcited by 0
- 2026Spectral-Guided Diffusion: Accelerating Inference via Static Spectral Layer Scheduling24 Aug 2026
- 2026Decentralized Diffusion Policy Learning for Enhanced Exploration in Cooperative Multi-agent Reinforcement Learning8 May 2026
- 2025Terminal Velocity Matching24 Nov 2025
- 2025Gaussian Universality for Diffusion Models13 Jan 2025
- 2024Improving Fine-Grained Control via Aggregation of Multiple Diffusion Models2 Oct 2024
- 2024Efficient Training of Large Vision Models via Advanced Automated Progressive Learning6 Sep 2024
- 2024SDXL-Lightning: Progressive Adversarial Diffusion Distillation21 Feb 2024
- 2024Efficient generative adversarial networks using linear additive-attention Transformers17 Jan 2024
- 2026HDPO: Hybrid Distillation Policy Optimization via Privileged Self-Distillationcited by 39
- 2025Bounds of Chain-of-Thought Robustness: Reasoning Steps, Embed Norms, and Beyondcited by 2
- 2026Energy-Entropy Regularization: The True Power of Minimal Looped Transformerscited by 2
- 2026CoT is Not the Chain of Truth: An Empirical Internal Analysis of Reasoning LLMs for Fake News Generationcited by 0
- 2026HDPO: Hybrid Distillation Policy Optimization via Privileged Self-Distillation25 Mar 2026
- 2026CoT is Not the Chain of Truth: An Empirical Internal Analysis of Reasoning LLMs for Fake News Generation4 Feb 2026
- 2026Energy-Entropy Regularization: The True Power of Minimal Looped Transformers14 Jan 2026
- 2025Bounds of Chain-of-Thought Robustness: Reasoning Steps, Embed Norms, and Beyond25 Sep 2025
- 2025Task-KV: Task-aware KV Cache Optimization via Semantic Differentiation of Attention Headscited by 4
- 2026Polynomial Context-Truncation Sensitivity in Autoregressive Language Models: Sequential Wyner-Ziv Bounds for KV Cache Compressioncited by 0
- 2026Later Is Better: Token Reduction for ViTs Under Distribution Shiftcited by 0
- 2026Later Is Better: Token Reduction for ViTs Under Distribution Shift6 Oct 2026
- 2026Polynomial Context-Truncation Sensitivity in Autoregressive Language Models: Sequential Wyner-Ziv Bounds for KV Cache Compression24 May 2026
- 2025Task-KV: Task-aware KV Cache Optimization via Semantic Differentiation of Attention Heads25 Jan 2025
- 2026Mind the Gap No More: Achieving Zero-Gap Multimodal Integration via One Tokenizer21 Jan 2026
- 2024Law of Vision Representation in MLLMs29 Aug 2024
- 2023One Fits All:Power General Time Series Analysis by Pretrained LMcited by 615
- 2023Scaling up GANs for Text-to-Image Synthesiscited by 492
- 2021Attention is Not All You Need: Pure Attention Loses Rank Doubly Exponentially with Depthcited by 411
- 2021Deep Generative Modelling: A Comparative Review of VAEs, GANs, Normalizing Flows, Energy-Based and Autoregressive Modelscited by 251
- 2021Rethinking Space-Time Networks with Improved Memory Coverage for Efficient Video Object Segmentationcited by 200
- 2021Inductive Biases and Variable Creation in Self-Attention Mechanismscited by 144
- 2022On The Computational Complexity of Self-Attentioncited by 137
- 2021Sinkformers: Transformers with Doubly Stochastic Attentioncited by 136
- 2022Anti-Oversmoothing in Deep Vision Transformers via the Fourier Domain Analysis: From Theory to Practicecited by 136
- 2021ViTGAN: Training GANs with Vision Transformerscited by 110
- 2023A Theoretical Understanding of Shallow Vision Transformers: Learning, Generalization, and Sample Complexitycited by 77
- 2025Whoever Started the Interference Should End It: Guiding Data-Free Model Merging via Task Vectorscited by 59
12 most cited of 143 All 143 (JSON)
- 2026When Can Prefixes Compile LoRA? Exact Resource-Capped Tests for Frozen Attention29 Sep 2026
- 2026Universal Approximation of Measure-to-Measure Operators by Pushforwards28 Sep 2026
- 2026Reference-Tail Trust:Certified Probability Floors for Learned Updates Inside a Deployed Network28 Sep 2026
- 2026General Quantification of Covariate and Concept Shifts10 Sep 2026
- 2026Certified Mechanistic Interpretability: Lifting Single-Input Findings to Bounded Neighbourhoods17 Aug 2026
- 2026Corrupting Attention: Evasion-Based Adversarial Attacks on Encoder Attention in Detection Transformers7 Aug 2026
- 2026EulerLoRA: Rank-Driven Jump Dynamics for Calibrated Parameter-Efficient Fine-Tuning2 Aug 2026
- 2026StraightDP: Geometry-Aware Differential Privacy for Rectified-Flow Transformers31 Jul 2026
- 2026Efficient LLM Adversarial Training via Low-Rank Defense and Circuit-Guided Surrogates31 Jul 2026
- 2026Attacking Graph Foundation Models Through Their Shared Representation20 Jul 2026
- 2026Extreme Meta-Classification for Large-Scale Zero-Shot Retrieval23 Jun 2026
- 2026Fixed-Point Reasoners: Stable and Adaptive Deep Looped Transformers16 Jun 2026
12 newest of 143 All 143 (JSON)