mlsanityData to 14 Oct 2026

Exact Unlearning of Finetuning Data via Model Merging at Scale

arXiv 2504.04626 ↗First posted 6 Apr 2025cs.LGcited by 14

On the map: LLM safety and security → Machine unlearning

Abstract (arXiv)

Approximate unlearning has gained popularity as an approach to efficiently update an LLM so that it behaves (roughly) as if it was not trained on a subset of data to begin with. However, existing methods are brittle in practice and can easily be attacked to reveal supposedly unlearned information. To alleviate issues with approximate unlearning, we instead propose SIFT-Masks (SIgn-Fixed Tuning-Masks), an exact unlearning method based on model merging. SIFT-Masks addresses two key limitations of standard model merging: (1) merging a large number of tasks can severely harm utility; and (2) methods that boost utility by sharing extra information across tasks make exact unlearning prohibitively expensive. SIFT-Masks solves these issues by (1) applying local masks to recover task-specific performance; and (2) constraining finetuning to align with a global sign vector as a lightweight approach to determine masks independently before merging. Across four settings where we merge up to 500 models, SIFT-Masks improves accuracy by 5-80% over naive merging and uses up to 250x less compute for exact unlearning compared to other merging baselines.

Key facts. Cited by 14 papers in the map (data through 14 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 54 of its 76 references that are in the map. First posted on arXiv 6 Apr 2025.

Builds on

54 of 76 references.

Closest ancestors · 17

Same direction, newest first

  1. 2024SEUF: Is Unlearning One Expert Enough for Mixture-of-Experts LLMs?27 Nov
  2. 2024Provable unlearning in topic modeling and downstream tasks19 Nov
  3. 2024Edge Unlearning is Not "on Edge"! An Adaptive Exact Unlearning System on Resource-Constrained Devices14 Oct
  4. 2024Do Unlearning Methods Remove Information from Language Model Weights?11 Oct
  5. 2024An Adversarial Perspective on Machine Unlearning for AI Safety26 Sep
  6. 2024MUSE: Machine Unlearning Six-Way Evaluation for Language Models8 Jul
  7. 2024Towards Scalable Exact Machine Unlearning Using Parameter-Efficient Fine-Tuning24 Jun
  8. 2024Unlearning or Obfuscating? Jogging the Memory of Unlearned LLMs via Benign Relearning19 Jun
  9. 2024Split, Unlearn, Merge: Leveraging Data Attributes for More Effective Unlearning in LLMs17 Jun
  10. 2024RWKU: Benchmarking Real-World Knowledge Unlearning for Large Language Models16 Jun
  11. 2024Reconstruction Attacks on Machine Unlearning: Simple Models are Vulnerable30 May
  12. 2024Learn What You Want to Unlearn: Unlearning Inversion Attacks against Machine Unlearning4 Apr
5 more
  1. 2024TOFU: A Task of Fictitious Unlearning for LLMs11 Jan
  2. 2023Who's Harry Potter? Approximate Unlearning in LLMs3 Oct
  3. 2023Model Sparsity Can Simplify Machine Unlearning11 Apr
  4. 2021Fast Yet Effective Machine Unlearning17 Nov
  5. 2021Hard to Forget: Poisoning Attacks on Certified Machine Unlearning17 Sep

Other references · 37

  1. 2024The Llama 3 Herd of Modelscited by 14,715
  2. 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,380
  3. 2021Measuring Mathematical Problem Solving With the MATH Datasetcited by 5,371
  4. 2022Scaling Instruction-Finetuned Language Modelscited by 3,024
  5. 2022Model soups: averaging weights of multiple fine-tuned models improves accuracy without increasing inference timecited by 1,396
  6. 2022Editing Models with Task Arithmeticcited by 1,120
  7. 2019Machine Unlearningcited by 1,061
  8. 2023TIES-Merging: Resolving Interference When Merging Modelscited by 818
  9. 2018LEAF: A Benchmark for Federated Settingscited by 792
  10. 2022Quantifying Memorization Across Neural Language Modelscited by 763
  11. 2023Language Models are Super Mario: Absorbing Abilities from Homologous Models as a Free Lunchcited by 694
  12. 2021Merging Models with Fisher-Weighted Averagingcited by 621
25 more
  1. 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearningcited by 509
  2. 2022Git Re-Basin: Merging Models modulo Permutation Symmetriescited by 471
  3. 2019Making AI Forget You: Data Deletion in Machine Learningcited by 465
  4. 2020Descent-to-Delete: Gradient-Based Methods for Machine Unlearningcited by 311
  5. 2019What's Hidden in a Randomly Weighted Neural Network?cited by 237
  6. 2023Task Arithmetic in the Tangent Space: Improved Editing of Pre-Trained Modelscited by 221
  7. 2023ZipIt! Merging Models from Different Tasks without Trainingcited by 179
  8. 2023Model Breadcrumbs: Scaling Multi-Task Model Merging with Sparse Maskscited by 133
  9. 2024Localizing Task Information for Improved Model Merging and Compressioncited by 131
  10. 2024Twin-Merging: Dynamic Integration of Modular Expertise in Model Mergingcited by 116
  11. 2024EMR-Merging: Tuning-Free High-Performance Model Mergingcited by 110
  12. 2022Federated Unlearning: How to Efficiently Erase a Client in FL?cited by 95
  13. 2022Recommendation Unlearningcited by 80
  14. 2024MagMax: Leveraging Model Merging for Seamless Continual Learningcited by 67
  15. 2024What Matters for Model Merging at Scale?cited by 55
  16. 2024Localize-and-Stitch: Efficient Model Merging via Sparse Task Arithmeticcited by 50
  17. 2024Training-Free Pretrained Model Mergingcited by 32
  18. 2022Making Recommender Systems Forget: Learning and Unlearning for Erasable Recommendationcited by 29
  19. 2022Pareto Manifold Learning: Tackling multiple tasks via ensembles of single-task modelscited by 29
  20. 2023Merging Vision Transformers from Different Tasks and Domainscited by 17
  21. 2024Exact and Efficient Unlearning for Large Language Model-based Recommendationcited by 17
  22. 2024Mix Data or Merge Models? Optimizing for Diverse Multi-Task Learningcited by 17
  23. 2024Towards More Realistic Extraction Attacks: An Adversarial Perspectivecited by 8
  24. 2024Channel Merging: Preserving Specialization for Merged Expertscited by 5
  25. 2024Extracting Memorized Training Data via Decompositioncited by 4

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 10; 2026: 4.

14 papers.

Sort:

By area:

Similar, not cited

Close in wording, no citation either way

  1. 2024Understanding Fine-tuning in Approximate Unlearning: A Theoretical Perspective
  2. 2024Fast Exact Unlearning for In-Context Learning Data for LLMs
  3. 2025SAEs Can Improve Unlearning: Dynamic Sparse Autoencoder Guardrails for Precision Unlearning in LLMs
  4. 2026Designing to Forget: Deep Semi-parametric Models for Unlearning
  5. 2024NegMerge: Sign-Consensual Weight Merging for Machine Unlearning
  6. 2025Improving Unlearning with Model Updates Probably Aligned with Gradients
  7. 2024Merge to Learn: Efficiently Adding Skills to Language Models with Model Merging
  8. 2026Reference-Guided Machine Unlearning