mlsanityData to 14 Oct 2026

Lost in Overlap: Exploring Logit-based Watermark Collision in LLMs

arXiv 2403.10020 ↗First posted 15 Mar 2024cs.CL cs.MMcited by 4

On the map: LLM safety and security → Watermarking generated content and models

Abstract (arXiv)

The proliferation of large language models (LLMs) in generating content raises concerns about text copyright. Watermarking methods, particularly logit-based approaches, embed imperceptible identifiers into text to address these challenges. However, the widespread usage of watermarking across diverse LLMs has led to an inevitable issue known as watermark collision during common tasks, such as paraphrasing or translation. In this paper, we introduce watermark collision as a novel and general philosophy for watermark attacks, aimed at enhancing attack performance on top of any other attacking methods. We also provide a comprehensive demonstration that watermark collision poses a threat to all logit-based watermark algorithms, impacting not only specific attack scenarios but also downstream applications.

Key facts. Cited by 4 papers in the map (data through 14 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 12 of its 27 references that are in the map. First posted on arXiv 15 Mar 2024.

Builds on

12 of 27 references.

Closest ancestors · 5

Same direction, newest first

  1. 2024GumbelSoft: Diversified Language Model Watermarking via the GumbelMax-trick20 Feb
  2. 2023CodeMark: Imperceptible Watermarking for Code Datasets against Neural Code Completion Models28 Aug
  3. 2023Robust Distortion-free Watermarks for Language Models28 Jul
  4. 2023Provable Robust Watermarking for AI-Generated Text30 Jun
  5. 2023Watermarking Text Data on Large Language Models for Dataset Copyright22 May

Other references · 7

  1. 2020Language Models are Few-Shot Learnerscited by 32,419
  2. 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,599
  3. 2019RoBERTa: A Robustly Optimized BERT Pretraining Approachcited by 13,372
  4. 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
  5. 2022OPT: Open Pre-trained Transformer Language Modelscited by 3,512
  6. 2023Qwen Technical Reportcited by 3,344
  7. 2021CoProtector: Protect Open-Source Code against Unauthorized Training Usage with Data Poisoningcited by 47

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2024: 1; 2025: 1; 2026: 2.

4 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2024No Free Lunch in LLM Watermarking: Trade-offs in Watermarking Design Choices
  2. 2024From Intentions to Techniques: A Comprehensive Taxonomy and Challenges in Text Watermarking for Large Language Models
  3. 2025SoK: Are Watermarks in LLMs Ready for Deployment?
  4. 2025Character-Level Perturbations Disrupt LLM Watermarks
  5. 2024PostMark: A Robust Blackbox Watermark for Large Language Models
  6. 2023Baselines for Identifying Watermarked Large Language Models
  7. 2024Watermark Stealing in Large Language Models
  8. 2025DERMARK: A Dynamic, Efficient and Robust Multi-bit Watermark for Large Language Models