mlsanityData to 14 Oct 2026

Silent Tokens, Loud Effects: Padding in LLMs

arXiv 2510.01238 ↗First posted 23 Sep 2025cs.CL cs.LGcited by 4

Not on the map. Why?

Abstract (arXiv)

Padding tokens are widely used in large language models (LLMs) to equalize sequence lengths during batched inference. While they should be fully masked, implementation errors can cause them to influence computation, and the extent of this influence is not well understood. We systematically study this effect across three open-source model families (Llama, Gemma, Qwen), inserting controlled amounts of padding and evaluating outcomes along four axes: activations, generation quality, bias, and safety. Even small amounts of padding shift hidden representations, degrade quality in smaller models, alter bias in unpredictable ways, and weaken safety guardrails. These findings demonstrate that padding is not a harmless detail but a robustness risk that must be carefully handled in deployment.

Key facts. Cited by 4 papers in the map (data through 14 Oct 2026). Builds on 14 of its 22 references that are in the map. First posted on arXiv 23 Sep 2025.

Builds on

14 of 22 references.

References · 14

  1. 2024The Llama 3 Herd of Modelscited by 14,715
  2. 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
  3. 2019BERTScore: Evaluating Text Generation with BERTcited by 5,512
  4. 2023Qwen Technical Reportcited by 3,344
  5. 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,975
  6. 2024Qwen2 Technical Reportcited by 2,120
  7. 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,429
  8. 2024Refusal in Language Models Is Mediated by a Single Directioncited by 1,032
  9. 2021BARTScore: Evaluating Generated Text as Text Generationcited by 722
  10. 2021BBQ: A Hand-Built Bias Benchmark for Question Answeringcited by 701
  11. 2024Mind the Inconspicuous: Revealing the Hidden Weakness in Aligned LLMs' Refusal Boundariescited by 28
  12. 2025Padding Tone: A Mechanistic Analysis of Padding Tokens in T2I Modelscited by 13
2 more
  1. 2025AISafetyLab: A Comprehensive Framework for AI Safety Evaluation and Improvementcited by 12
  2. 2025Jailbreak Attack Initializations as Extractors of Compliance Directionscited by 10

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 2; 2026: 2.

4 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2023Divergent Token Metrics: Measuring degradation to prune away LLM components -- and optimize quantization
  2. 2024Tokenization counts: the impact of tokenization on arithmetic in frontier LLMs
  3. 2024Beyond Perplexity: Multi-dimensional Safety Evaluation of LLM Compression
  4. 2026Why do Large Language Models Fail in Low-resource Translation? Unraveling the Token Dynamics of Large Language Models for Machine Translation
  5. 2025A Lightweight Method to Disrupt Memorized Sequences in LLM
  6. 2024Where is the signal in tokenization space?
  7. 2026Say Anything but This: When Tokenizer Betrays Reasoning in LLMs
  8. 2026Quantization Undoes Alignment: Bias Emergence in Compressed LLMs Across Models and Precision Levels