Understanding the Dilemma of Unlearning for Large Language Models
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
Unlearning seeks to remove specific knowledge from large language models (LLMs), but its effectiveness remains contested. On one side, "forgotten" knowledge can often be recovered through interventions such as light fine-tuning; on the other side, unlearning may induce catastrophic forgetting that degrades general capabilities. Despite active exploration of unlearning methods, interpretability analyses of the mechanism are scarce due to the difficulty of tracing knowledge in LLMs' complex architectures. We address this gap by proposing unPact, an interpretable framework for unlearning via prompt attribution and contribution tracking. Typically, it quantifies each prompt token's influence on outputs, enabling pre- and post-unlearning comparisons to reveal what changes. Across six mainstream unlearning methods, three LLMs, and three benchmarks, we find that: (1) Unlearning appears to be effective by disrupting focus on keywords in prompt; (2) Much of the knowledge is not truly erased and can be recovered by simply emphasizing these keywords in prompts, without modifying the model's weights; (3) Catastrophic forgetting arises from indiscriminate penalization of all tokens. Taken together, our results suggest an unlearning dilemma: existing methods tend either to be insufficient - knowledge remains recoverable by keyword emphasis, or overly destructive - general performance collapses due to catastrophic forgetting, still leaving a gap to reliable unlearning.
Key facts. Cited by 3 papers in the map (data through 7 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 51 of its 65 references that are in the map. First posted on arXiv 29 Sep 2025.
Builds on
51 of 65 references.
Closest ancestors · 21
Same direction, newest first
- 2025Concept Unlearning in Large Language Models via Self-Constructed Knowledge Triplets19 Sep
- 2025Unlearning That Lasts: Utility-Preserving, Robust, and Almost Irreversible Forgetting in LLMs2 Sep
- 2025DualOptim: Enhancing Efficacy and Stability in Machine Unlearning with Dual Optimizers22 Apr
- 2024A Closer Look at Machine Unlearning for Large Language Models10 Oct
- 2024A Probabilistic Perspective on Unlearning and Alignment for Large Language Models4 Oct
- 2024Position: LLM Unlearning Benchmarks are Weak Measures of Progress3 Oct
- 2024MUSE: Machine Unlearning Six-Way Evaluation for Language Models8 Jul
- 2024UnUnlearning: Unlearning is not sufficient for content regulation in advanced generative AI27 Jun
- 2024Unlearning or Obfuscating? Jogging the Memory of Unlearned LLMs via Benign Relearning19 Jun
- 2024RWKU: Benchmarking Real-World Knowledge Unlearning for Large Language Models16 Jun
- 2024Reversing the Forget-Retain Objectives: An Efficient LLM Unlearning Framework from Logit Difference12 Jun
- 2024SOUL: Unlocking the Power of Second-Order Optimization for LLM Unlearning28 Apr
9 more
- 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearning8 Apr
- 2024Eight Methods to Evaluate Robust Unlearning in LLMs26 Feb
- 2024TOFU: A Task of Fictitious Unlearning for LLMs11 Jan
- 2023In-Context Unlearning: Language Models as Few Shot Unlearners11 Oct
- 2023Who's Harry Potter? Approximate Unlearning in LLMs3 Oct
- 2023KGA: A General Machine Unlearning Framework Based on Knowledge Gap Alignment11 May
- 2022Knowledge Unlearning for Mitigating Privacy Risks in Language Models4 Oct
- 2022A Survey of Machine Unlearning6 Sep
- 2022Continual Learning and Private Unlearning24 Mar
Other references · 30
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 7,916
- 2024GPT-4o System Cardcited by 4,467
- 2024A Survey on LLM-as-a-Judgecited by 1,384
- 2021Calibrate Before Use: Improving Few-Shot Performance of Language Modelscited by 1,371
- 2023Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To!cited by 1,106
- 2022Editing Models with Task Arithmeticcited by 1,076
- 2019Machine Unlearningcited by 1,020
- 2023An Empirical Study of Catastrophic Forgetting in Large Language Models During Continual Fine-tuningcited by 622
- 2023Eliciting Latent Predictions from Transformers with the Tuned Lenscited by 579
- 2019Certified Data Removal from Machine Learning Modelscited by 512
- 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearningcited by 488
18 more
- 2021Causal Abstractions of Neural Networkscited by 401
- 2023Explainability for Large Language Models: A Surveycited by 331
- 2024Latent Adversarial Training Improves Robustness to Persistent Harmful Behaviors in LLMscited by 158
- 2023Can Sensitive Information Be Deleted From LLMs? Objectives for Defending Against Extraction Attackscited by 156
- 2024Tamper-Resistant Safeguards for Open-Weight LLMscited by 132
- 2024Mitigating Catastrophic Forgetting in Large Language Models with Self-Synthesized Rehearsalcited by 114
- 2024Revisiting Catastrophic Forgetting in Large Language Model Tuningcited by 93
- 2024Systematic Evaluation of LLM-as-a-Judge in LLM Alignment Tasks: Explainable Metrics and Diverse Prompt Templatescited by 71
- 2024Understanding the Dark Side of LLMs' Intrinsic Self-Correctioncited by 42
- 2024Knowledge Boundary of Large Language Models: A Surveycited by 36
- 2023Using Captum to Explain Generative Language Modelscited by 33
- 2022Repairing Neural Networks by Leaving the Right Past Behindcited by 27
- 2024More Than Catastrophic Forgetting: Integrating General Capabilities For Domain-Specific LLMscited by 21
- 2025Explainable artificial intelligence (XAI): from inherent explainability to large language modelscited by 12
- 2024Unveiling and Manipulating Prompt Influence in Large Language Modelscited by 6
- 2024PromptExp: Multi-granularity Prompt Explanation of Large Language Modelscited by 6
- 2023Overinformative Question Answering by Humans and Machinescited by 3
- 2025When Smiley Turns Hostile: Interpreting How Emojis Trigger LLMs' Toxicitycited by 2
Built on by
Citing papers per year: 2026: 3.
3 papers.