Lost in Overlap: Exploring Logit-based Watermark Collision in LLMs
On the map: LLM safety and security → Watermarking generated content and models
Abstract (arXiv)
The proliferation of large language models (LLMs) in generating content raises concerns about text copyright. Watermarking methods, particularly logit-based approaches, embed imperceptible identifiers into text to address these challenges. However, the widespread usage of watermarking across diverse LLMs has led to an inevitable issue known as watermark collision during common tasks, such as paraphrasing or translation. In this paper, we introduce watermark collision as a novel and general philosophy for watermark attacks, aimed at enhancing attack performance on top of any other attacking methods. We also provide a comprehensive demonstration that watermark collision poses a threat to all logit-based watermark algorithms, impacting not only specific attack scenarios but also downstream applications.
Key facts. Cited by 4 papers in the map (data through 14 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 12 of its 27 references that are in the map. First posted on arXiv 15 Mar 2024.
Builds on
12 of 27 references.
Closest ancestors · 5
Same direction, newest first
- 2024GumbelSoft: Diversified Language Model Watermarking via the GumbelMax-trick20 Feb
- 2023CodeMark: Imperceptible Watermarking for Code Datasets against Neural Code Completion Models28 Aug
- 2023Robust Distortion-free Watermarks for Language Models28 Jul
- 2023Provable Robust Watermarking for AI-Generated Text30 Jun
- 2023Watermarking Text Data on Large Language Models for Dataset Copyright22 May
Other references · 7
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,599
- 2019RoBERTa: A Robustly Optimized BERT Pretraining Approachcited by 13,372
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
- 2022OPT: Open Pre-trained Transformer Language Modelscited by 3,512
- 2023Qwen Technical Reportcited by 3,344
- 2021CoProtector: Protect Open-Source Code against Unauthorized Training Usage with Data Poisoningcited by 47
Built on by
Citing papers per year: 2024: 1; 2025: 1; 2026: 2.
4 papers.
- 2024WAPITI: A Watermark for Finetuned Open-Source LLMscited by 12
- 2025Is Multilingual LLM Watermarking Truly Multilingual? Scaling Robustness to 100+ Languages via Back-Translationcited by 1
- 2026Watermarks Attack Watermarks: Re-Watermarking as a Generic Removal Strategycited by 0
- 2026The Fragility of Trigger-Tag Mechanisms for Misuse Detection in Open-Weight LLMscited by 0
- 2026The Fragility of Trigger-Tag Mechanisms for Misuse Detection in Open-Weight LLMs2 Oct 2026
- 2026Watermarks Attack Watermarks: Re-Watermarking as a Generic Removal Strategy16 May 2026
- 2025Is Multilingual LLM Watermarking Truly Multilingual? Scaling Robustness to 100+ Languages via Back-Translation20 Oct 2025
- 2024WAPITI: A Watermark for Finetuned Open-Source LLMs9 Oct 2024
Similar, not cited
Close in wording, no citation either way
- 2024No Free Lunch in LLM Watermarking: Trade-offs in Watermarking Design Choices
- 2024From Intentions to Techniques: A Comprehensive Taxonomy and Challenges in Text Watermarking for Large Language Models
- 2025SoK: Are Watermarks in LLMs Ready for Deployment?
- 2025Character-Level Perturbations Disrupt LLM Watermarks
- 2024PostMark: A Robust Blackbox Watermark for Large Language Models
- 2023Baselines for Identifying Watermarked Large Language Models
- 2024Watermark Stealing in Large Language Models
- 2025DERMARK: A Dynamic, Efficient and Robust Multi-bit Watermark for Large Language Models