Exploring Multimodal Challenges in Toxic Chinese Detection: Taxonomy, Benchmark, and Findings
Not on the map. Why?
Abstract (arXiv)
Detecting toxic content using language models is important but challenging. While large language models (LLMs) have demonstrated strong performance in understanding Chinese, recent studies show that simple character substitutions in toxic Chinese text can easily confuse the state-of-the-art (SOTA) LLMs. In this paper, we highlight the multimodal nature of Chinese language as a key challenge for deploying LLMs in toxic Chinese detection. First, we propose a taxonomy of 3 perturbation strategies and 8 specific approaches in toxic Chinese content. Then, we curate a dataset based on this taxonomy, and benchmark 9 SOTA LLMs (from both the US and China) to assess if they can detect perturbed toxic Chinese text. Additionally, we explore cost-effective enhancement solutions like in-context learning (ICL) and supervised fine-tuning (SFT). Our results reveal two important findings. (1) LLMs are less capable of detecting perturbed multimodal Chinese toxic contents. (2) ICL or SFT with a small number of perturbed examples may cause the LLMs "overcorrect'': misidentify many normal Chinese contents as toxic.
Key facts. Cited by 10 papers in the map (data through 7 Oct 2026). Builds on 18 of its 44 references that are in the map. First posted on arXiv 30 May 2025.
Builds on
18 of 44 references.
References · 18
- 2024ChatGLM: A Family of Large Language Models from GLM-130B to GLM-4 All Toolscited by 1,096
- 2024Yi: Open Foundation Models by 01.AIcited by 706
- 2018TextBugger: Generating Adversarial Text Against Real-world Applicationscited by 376
- 2023The Earth is Flat because...: Investigating LLMs' Belief towards Misinformation via Persuasive Conversationcited by 107
- 2020Toxicity Detection: Does Context Really Matter?cited by 93
- 2022COLD: A Benchmark for Chinese Offensive Language Detectioncited by 74
- 2021Designing Toxic Content Classification for a Diversity of Perspectivescited by 63
- 2022Handling Bias in Toxic Speech Detection: A Surveycited by 60
- 2023Facilitating Fine-grained Detection of Chinese Toxic Language: Hierarchical Taxonomy, Resources, and Benchmarkscited by 45
- 2022SemAttack: Natural Textual Attacks via Different Semantic Spacescited by 42
- 2024Understanding the Dark Side of LLMs' Intrinsic Self-Correctioncited by 42
- 2024ToxiCloakCN: Evaluating Robustness of Offensive Language Detection in Chinese with Cloaking Perturbationscited by 30
6 more
- 2024An Engorgio Prompt Makes Large Language Model Babble oncited by 30
- 2024Converging to a Lingua Franca: Evolution of Linguistic Regions and Semantics Alignment in Multilingual Large Language Modelscited by 22
- 2023Cross-Cultural Transfer Learning for Chinese Offensive Language Detectioncited by 21
- 2024Walking in Others' Shoes: How Perspective-Taking Guides Large Language Models in Reducing Toxicity and Biascited by 17
- 2024Course-Correction: Safety Alignment Using Synthetic Preferencescited by 13
- 2017Learning Chinese Word Representations From Glyphs Of Characterscited by 8
Built on by
Citing papers per year: 2025: 2; 2026: 8.
10 papers.
- 2025Lost in Pronunciation: Detecting Chinese Offensive Language Disguised by Phonetic Cloaking Replacementcited by 10
- 2026CSSBench: Evaluating the Safety of Lightweight LLMs against Chinese-Specific Adversarial Patternscited by 5
- 2025ToxiFrench: Benchmarking and Enhancing Language Models via CoT Fine-Tuning for French Toxicity Detectioncited by 3
- 2026Exploring the Capability Boundaries of LLMs in Mastering of Chinese Chouxiang Languagecited by 2
- 2026ToxiTrace: Gradient-Aligned Training for Explainable Chinese Toxicity Detectioncited by 0
- 2026Harder to Defend: Towards Chinese Toxicity Attacks via Implicit Enhancement and Obfuscation Rewritingcited by 0
- 2026Beyond English and Evasion: A Human-Annotated Multi-Domain Benchmark for High-Stakes LLM Safety Evaluation in Chinesecited by 0
- 2026New Terms, New Toxicity: Consensus-based Chinese Neologism Toxicity Detection via Search-Augmented LLMscited by 0
- 2026ReCAST: Restoration-aware Cascaded Stage-wise Training for Obfuscated SMS Risk Classificationcited by 0
- 2026SinoGlyphBench: A Diagnostic Benchmark for Chinese Glyph-Level Obfuscation in Language-Model Moderationcited by 0
- 2026SinoGlyphBench: A Diagnostic Benchmark for Chinese Glyph-Level Obfuscation in Language-Model Moderation5 Sep 2026
- 2026ReCAST: Restoration-aware Cascaded Stage-wise Training for Obfuscated SMS Risk Classification4 Sep 2026
- 2026New Terms, New Toxicity: Consensus-based Chinese Neologism Toxicity Detection via Search-Augmented LLMs5 Jul 2026
- 2026Beyond English and Evasion: A Human-Annotated Multi-Domain Benchmark for High-Stakes LLM Safety Evaluation in Chinese28 May 2026
- 2026Harder to Defend: Towards Chinese Toxicity Attacks via Implicit Enhancement and Obfuscation Rewriting21 May 2026
- 2026Exploring the Capability Boundaries of LLMs in Mastering of Chinese Chouxiang Language17 Apr 2026
- 2026ToxiTrace: Gradient-Aligned Training for Explainable Chinese Toxicity Detection14 Apr 2026
- 2026CSSBench: Evaluating the Safety of Lightweight LLMs against Chinese-Specific Adversarial Patterns2 Jan 2026
- 2025ToxiFrench: Benchmarking and Enhancing Language Models via CoT Fine-Tuning for French Toxicity Detection15 Aug 2025
- 2025Lost in Pronunciation: Detecting Chinese Offensive Language Disguised by Phonetic Cloaking Replacement10 Jul 2025