Exact Unlearning of Finetuning Data via Model Merging at Scale
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
Approximate unlearning has gained popularity as an approach to efficiently update an LLM so that it behaves (roughly) as if it was not trained on a subset of data to begin with. However, existing methods are brittle in practice and can easily be attacked to reveal supposedly unlearned information. To alleviate issues with approximate unlearning, we instead propose SIFT-Masks (SIgn-Fixed Tuning-Masks), an exact unlearning method based on model merging. SIFT-Masks addresses two key limitations of standard model merging: (1) merging a large number of tasks can severely harm utility; and (2) methods that boost utility by sharing extra information across tasks make exact unlearning prohibitively expensive. SIFT-Masks solves these issues by (1) applying local masks to recover task-specific performance; and (2) constraining finetuning to align with a global sign vector as a lightweight approach to determine masks independently before merging. Across four settings where we merge up to 500 models, SIFT-Masks improves accuracy by 5-80% over naive merging and uses up to 250x less compute for exact unlearning compared to other merging baselines.
Key facts. Cited by 14 papers in the map (data through 14 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 54 of its 76 references that are in the map. First posted on arXiv 6 Apr 2025.
Builds on
54 of 76 references.
Closest ancestors · 17
Same direction, newest first
- 2024SEUF: Is Unlearning One Expert Enough for Mixture-of-Experts LLMs?27 Nov
- 2024Provable unlearning in topic modeling and downstream tasks19 Nov
- 2024Edge Unlearning is Not "on Edge"! An Adaptive Exact Unlearning System on Resource-Constrained Devices14 Oct
- 2024Do Unlearning Methods Remove Information from Language Model Weights?11 Oct
- 2024An Adversarial Perspective on Machine Unlearning for AI Safety26 Sep
- 2024MUSE: Machine Unlearning Six-Way Evaluation for Language Models8 Jul
- 2024Towards Scalable Exact Machine Unlearning Using Parameter-Efficient Fine-Tuning24 Jun
- 2024Unlearning or Obfuscating? Jogging the Memory of Unlearned LLMs via Benign Relearning19 Jun
- 2024Split, Unlearn, Merge: Leveraging Data Attributes for More Effective Unlearning in LLMs17 Jun
- 2024RWKU: Benchmarking Real-World Knowledge Unlearning for Large Language Models16 Jun
- 2024Reconstruction Attacks on Machine Unlearning: Simple Models are Vulnerable30 May
- 2024Learn What You Want to Unlearn: Unlearning Inversion Attacks against Machine Unlearning4 Apr
5 more
Other references · 37
- 2024The Llama 3 Herd of Modelscited by 14,715
- 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,380
- 2021Measuring Mathematical Problem Solving With the MATH Datasetcited by 5,371
- 2022Scaling Instruction-Finetuned Language Modelscited by 3,024
- 2022Model soups: averaging weights of multiple fine-tuned models improves accuracy without increasing inference timecited by 1,396
- 2022Editing Models with Task Arithmeticcited by 1,120
- 2019Machine Unlearningcited by 1,061
- 2023TIES-Merging: Resolving Interference When Merging Modelscited by 818
- 2018LEAF: A Benchmark for Federated Settingscited by 792
- 2022Quantifying Memorization Across Neural Language Modelscited by 763
- 2023Language Models are Super Mario: Absorbing Abilities from Homologous Models as a Free Lunchcited by 694
- 2021Merging Models with Fisher-Weighted Averagingcited by 621
25 more
- 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearningcited by 509
- 2022Git Re-Basin: Merging Models modulo Permutation Symmetriescited by 471
- 2019Making AI Forget You: Data Deletion in Machine Learningcited by 465
- 2020Descent-to-Delete: Gradient-Based Methods for Machine Unlearningcited by 311
- 2019What's Hidden in a Randomly Weighted Neural Network?cited by 237
- 2023Task Arithmetic in the Tangent Space: Improved Editing of Pre-Trained Modelscited by 221
- 2023ZipIt! Merging Models from Different Tasks without Trainingcited by 179
- 2023Model Breadcrumbs: Scaling Multi-Task Model Merging with Sparse Maskscited by 133
- 2024Localizing Task Information for Improved Model Merging and Compressioncited by 131
- 2024Twin-Merging: Dynamic Integration of Modular Expertise in Model Mergingcited by 116
- 2024EMR-Merging: Tuning-Free High-Performance Model Mergingcited by 110
- 2022Federated Unlearning: How to Efficiently Erase a Client in FL?cited by 95
- 2022Recommendation Unlearningcited by 80
- 2024MagMax: Leveraging Model Merging for Seamless Continual Learningcited by 67
- 2024What Matters for Model Merging at Scale?cited by 55
- 2024Localize-and-Stitch: Efficient Model Merging via Sparse Task Arithmeticcited by 50
- 2024Training-Free Pretrained Model Mergingcited by 32
- 2022Making Recommender Systems Forget: Learning and Unlearning for Erasable Recommendationcited by 29
- 2022Pareto Manifold Learning: Tackling multiple tasks via ensembles of single-task modelscited by 29
- 2023Merging Vision Transformers from Different Tasks and Domainscited by 17
- 2024Exact and Efficient Unlearning for Large Language Model-based Recommendationcited by 17
- 2024Mix Data or Merge Models? Optimizing for Diverse Multi-Task Learningcited by 17
- 2024Towards More Realistic Extraction Attacks: An Adversarial Perspectivecited by 8
- 2024Channel Merging: Preserving Specialization for Merged Expertscited by 5
- 2024Extracting Memorized Training Data via Decompositioncited by 4
Built on by
Citing papers per year: 2025: 10; 2026: 4.
14 papers.
Sort:
By area:
- 2025FlexOlmo: Open Language Models for Flexible Data Usecited by 15
- 2025Editing as Unlearning: Are Knowledge Editing Methods Strong Baselines for Large Language Model Unlearning?cited by 13
- 2025SoK: Machine Unlearning for Large Language Modelscited by 11
- 2025Continual Unlearning for Text-to-Image Diffusion Models: A Regularization Perspectivecited by 10
- 2025UCD: Unlearning in LLMs via Contrastive Decodingcited by 9
- 2025Model Collapse Is Not a Bug but a Feature in Machine Unlearning for LLMscited by 7
- 2025Gaussian Certified Unlearning in High Dimensions: A Hypothesis Testing Approachcited by 6
- 2025Unlearned but Not Forgotten: Data Extraction after Exact Unlearning in LLMcited by 5
- 2025Research in Collaborative Learning Does Not Serve Cross-Silo Federated Learning in Practicecited by 3
- 2026Inference-time Unlearning Using Conformal Predictioncited by 2
- 2025DivMerge: A divergence-based model merging method for multi-taskingcited by 1
- 2026Beyond Forgetting: Representation Misdirection Elicits Controllable Side Behaviors and Capabilitiescited by 1
2 more
- 2026Unmerge: Efficient Machine Unlearning via Task Arithmetic30 Sep 2026
- 2026FedUP: One-Shot Federated Unlearning via Centroid-Guided Plug-in Filters23 Jun 2026
- 2026Inference-time Unlearning Using Conformal Prediction3 Feb 2026
- 2026Beyond Forgetting: Representation Misdirection Elicits Controllable Side Behaviors and Capabilities29 Jan 2026
- 2025Continual Unlearning for Text-to-Image Diffusion Models: A Regularization Perspective11 Nov 2025
- 2025Gaussian Certified Unlearning in High Dimensions: A Hypothesis Testing Approach15 Oct 2025
- 2025Research in Collaborative Learning Does Not Serve Cross-Silo Federated Learning in Practice14 Oct 2025
- 2025DivMerge: A divergence-based model merging method for multi-tasking2 Sep 2025
- 2025FlexOlmo: Open Language Models for Flexible Data Use9 Jul 2025
- 2025Model Collapse Is Not a Bug but a Feature in Machine Unlearning for LLMs6 Jul 2025
- 2025UCD: Unlearning in LLMs via Contrastive Decoding12 Jun 2025
- 2025SoK: Machine Unlearning for Large Language Models10 Jun 2025
- 2025Editing as Unlearning: Are Knowledge Editing Methods Strong Baselines for Large Language Model Unlearning?cited by 13
- 2025SoK: Machine Unlearning for Large Language Modelscited by 11
- 2025UCD: Unlearning in LLMs via Contrastive Decodingcited by 9
- 2025Gaussian Certified Unlearning in High Dimensions: A Hypothesis Testing Approachcited by 6
- 2025Unlearned but Not Forgotten: Data Extraction after Exact Unlearning in LLMcited by 5
- 2026Inference-time Unlearning Using Conformal Predictioncited by 2
- 2026Beyond Forgetting: Representation Misdirection Elicits Controllable Side Behaviors and Capabilitiescited by 1
- 2026FedUP: One-Shot Federated Unlearning via Centroid-Guided Plug-in Filterscited by 0
- 2026Unmerge: Efficient Machine Unlearning via Task Arithmeticcited by 0
- 2026Unmerge: Efficient Machine Unlearning via Task Arithmetic30 Sep 2026
- 2026FedUP: One-Shot Federated Unlearning via Centroid-Guided Plug-in Filters23 Jun 2026
- 2026Inference-time Unlearning Using Conformal Prediction3 Feb 2026
- 2026Beyond Forgetting: Representation Misdirection Elicits Controllable Side Behaviors and Capabilities29 Jan 2026
- 2025Gaussian Certified Unlearning in High Dimensions: A Hypothesis Testing Approach15 Oct 2025
- 2025UCD: Unlearning in LLMs via Contrastive Decoding12 Jun 2025
- 2025SoK: Machine Unlearning for Large Language Models10 Jun 2025
- 2025Unlearned but Not Forgotten: Data Extraction after Exact Unlearning in LLM30 May 2025
- 2025Editing as Unlearning: Are Knowledge Editing Methods Strong Baselines for Large Language Model Unlearning?26 May 2025
- 2025FlexOlmo: Open Language Models for Flexible Data Usecited by 15
- 2025FlexOlmo: Open Language Models for Flexible Data Use9 Jul 2025
Similar, not cited
Close in wording, no citation either way
- 2024Understanding Fine-tuning in Approximate Unlearning: A Theoretical Perspective
- 2024Fast Exact Unlearning for In-Context Learning Data for LLMs
- 2025SAEs Can Improve Unlearning: Dynamic Sparse Autoencoder Guardrails for Precision Unlearning in LLMs
- 2026Designing to Forget: Deep Semi-parametric Models for Unlearning
- 2024NegMerge: Sign-Consensual Weight Merging for Machine Unlearning
- 2025Improving Unlearning with Model Updates Probably Aligned with Gradients
- 2024Merge to Learn: Efficiently Adding Skills to Language Models with Model Merging
- 2026Reference-Guided Machine Unlearning