Breaking Chains: Unraveling the Links in Multi-Hop Knowledge Unlearning
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
Large language models (LLMs) serve as giant information stores, often including personal or copyrighted data, and retraining them from scratch is not a viable option. This has led to the development of various fast, approximate unlearning techniques to selectively remove knowledge from LLMs. Prior research has largely focused on minimizing the probabilities of specific token sequences by reversing the language modeling objective. However, these methods still leave LLMs vulnerable to adversarial attacks that exploit indirect references. In this work, we examine the limitations of current unlearning techniques in effectively erasing a particular type of indirect prompt: multi-hop queries. Our findings reveal that existing methods fail to completely remove multi-hop knowledge when one of the intermediate hops is unlearned. To address this issue, we propose MUNCH, a simple uncertainty-based approach that breaks down multi-hop queries into subquestions and leverages the uncertainty of the unlearned model in final decision-making. Empirical results demonstrate the effectiveness of our framework, and MUNCH can be easily integrated with existing unlearning techniques, making it a flexible and useful solution for enhancing unlearning processes.
Key facts. Cited by 8 papers in the map (data through 14 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 37 of its 51 references that are in the map. First posted on arXiv 17 Oct 2024.
Builds on
37 of 51 references.
Closest ancestors · 6
Same direction, newest first
- 2024Protecting Privacy Through Approximating Optimal Parameters for Sequence Unlearning in Language Models20 Jun
- 2024Cross-Lingual Unlearning of Selective Knowledge in Multilingual Language Models18 Jun
- 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearning8 Apr
- 2024TOFU: A Task of Fictitious Unlearning for LLMs11 Jan
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation19 Oct
- 2022Knowledge Unlearning for Mitigating Privacy Risks in Language Models4 Oct
Other references · 31
- 2019PyTorch: An Imperative Style, High-Performance Deep Learning Librarycited by 20,305
- 2023GPT-4 Technical Reportcited by 18,396
- 2024The Llama 3 Herd of Modelscited by 14,715
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 8,065
- 2020Measuring Massive Multitask Language Understandingcited by 7,963
- 2018Think you have Solved Question Answering? Try ARC, the AI2 Reasoning Challengecited by 4,886
- 2019HellaSwag: Can a Machine Really Finish Your Sentence?cited by 4,100
- 2019PIQA: Reasoning about Physical Commonsense in Natural Languagecited by 2,883
- 2022Locating and Editing Factual Associations in GPTcited by 2,691
- 2018Can a Suit of Armor Conduct Electricity? A New Dataset for Open Book Question Answeringcited by 2,164
- 2019Language Models as Knowledge Bases?cited by 1,936
- 2024Phi-3 Technical Report: A Highly Capable Language Model Locally on Your Phonecited by 1,917
19 more
- 2018CommonsenseQA: A Question Answering Challenge Targeting Commonsense Knowledgecited by 1,822
- 2021Unsupervised Dense Information Retrieval with Contrastive Learningcited by 1,216
- 2022Measuring and Narrowing the Compositionality Gap in Language Modelscited by 1,075
- 2019Machine Unlearningcited by 1,061
- 2016The LAMBADA dataset: Word prediction requiring a broad discourse contextcited by 992
- 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 618
- 2021Editing Factual Knowledge in Language Modelscited by 553
- 2023Faith and Fate: Limits of Transformers on Compositionalitycited by 503
- 2019Making AI Forget You: Data Deletion in Machine Learningcited by 465
- 2023Scalable Extraction of Training Data from (Production) Language Modelscited by 434
- 2023Low-Resource Languages Jailbreak GPT-4cited by 309
- 2023MQuAKE: Assessing Knowledge Editing in Language Models via Multi-Hop Questionscited by 300
- 2023Evaluating the Ripple Effects of Knowledge Editing in Language Modelscited by 242
- 2024Patchscopes: A Unifying Framework for Inspecting Hidden Representations of Language Modelscited by 235
- 2020Forgetting Outside the Box: Scrubbing Deep Networks of Information Accessible from Input-Output Observationscited by 180
- 2024Stealing Part of a Production Language Modelcited by 159
- 2023Can LMs Learn New Entities from Descriptions? Challenges in Propagating Injected Knowledgecited by 67
- 2023The Impact of Depth on Compositional Generalization in Transformer Language Modelscited by 38
- 2023Memory Injections: Correcting Multi-Hop Reasoning Failures during Inference in Transformer-Based Language Modelscited by 21
Built on by
Citing papers per year: 2024: 1; 2025: 4; 2026: 3.
8 papers.
- 2024Evaluating Deep Unlearning in Large Language Modelscited by 14
- 2025UIPE: Enhancing LLM Unlearning by Removing Knowledge Related to Forgetting Targetscited by 10
- 2025Generative Model Unlearning: A Survey through Target Events, Unlearning Operators, and Evaluation Protocolscited by 4
- 2025A Survey on Unlearning in Large Language Modelscited by 4
- 2025Unlearning as Ablation: Toward a Falsifiable Benchmark for Generative Scientific Discoverycited by 2
- 2026The Unlearning Mirage: A Dynamic Framework for Evaluating LLM Unlearningcited by 1
- 2026AMNESIA: A Large Scale Medical Unlearning Benchmark Suite with Disease-Informed Analysiscited by 0
- 2026Leak-Resistant Unlearning: A New Benchmark for Evaluating Multi-Hop Reasoning Consistency and Recovery Robustnesscited by 0
- 2026Leak-Resistant Unlearning: A New Benchmark for Evaluating Multi-Hop Reasoning Consistency and Recovery Robustness5 Aug 2026
- 2026AMNESIA: A Large Scale Medical Unlearning Benchmark Suite with Disease-Informed Analysis28 May 2026
- 2026The Unlearning Mirage: A Dynamic Framework for Evaluating LLM Unlearning11 Mar 2026
- 2025A Survey on Unlearning in Large Language Models29 Oct 2025
- 2025Unlearning as Ablation: Toward a Falsifiable Benchmark for Generative Scientific Discovery25 Aug 2025
- 2025Generative Model Unlearning: A Survey through Target Events, Unlearning Operators, and Evaluation Protocols26 Jul 2025
- 2025UIPE: Enhancing LLM Unlearning by Removing Knowledge Related to Forgetting Targets6 Mar 2025
- 2024Evaluating Deep Unlearning in Large Language Models19 Oct 2024
Similar, not cited
Close in wording, no citation either way
- 2026Unlearning in LLMs: Methods, Evaluation, and Open Challenges
- 2026Making LLMs Truly Forget: Deep Unlearning by Searching, Selecting, and Severing Knowledge Paths
- 2024Catastrophic Failure of LLM Unlearning via Quantization
- 2025Concept Unlearning in Large Language Models via Self-Constructed Knowledge Triplets
- 2025Leak@k: Unlearning Does Not Make LLMs Forget Under Probabilistic Decoding
- 2024Towards Robust and Parameter-Efficient Knowledge Unlearning for LLMs
- 2024A Closer Look at Machine Unlearning for Large Language Models
- 2024Second-Order Information Matters: Revisiting Machine Unlearning for Large Language Models