Silent Tokens, Loud Effects: Padding in LLMs
Not on the map. Why?
Abstract (arXiv)
Padding tokens are widely used in large language models (LLMs) to equalize sequence lengths during batched inference. While they should be fully masked, implementation errors can cause them to influence computation, and the extent of this influence is not well understood. We systematically study this effect across three open-source model families (Llama, Gemma, Qwen), inserting controlled amounts of padding and evaluating outcomes along four axes: activations, generation quality, bias, and safety. Even small amounts of padding shift hidden representations, degrade quality in smaller models, alter bias in unpredictable ways, and weaken safety guardrails. These findings demonstrate that padding is not a harmless detail but a robustness risk that must be carefully handled in deployment.
Key facts. Cited by 4 papers in the map (data through 14 Oct 2026). Builds on 14 of its 22 references that are in the map. First posted on arXiv 23 Sep 2025.
Builds on
14 of 22 references.
References · 14
- 2024The Llama 3 Herd of Modelscited by 14,715
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
- 2019BERTScore: Evaluating Text Generation with BERTcited by 5,512
- 2023Qwen Technical Reportcited by 3,344
- 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,975
- 2024Qwen2 Technical Reportcited by 2,120
- 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,429
- 2024Refusal in Language Models Is Mediated by a Single Directioncited by 1,032
- 2021BARTScore: Evaluating Generated Text as Text Generationcited by 722
- 2021BBQ: A Hand-Built Bias Benchmark for Question Answeringcited by 701
- 2024Mind the Inconspicuous: Revealing the Hidden Weakness in Aligned LLMs' Refusal Boundariescited by 28
- 2025Padding Tone: A Mechanistic Analysis of Padding Tokens in T2I Modelscited by 13
Built on by
Citing papers per year: 2025: 2; 2026: 2.
4 papers.
- 2025Silenced Biases: The Dark Side LLMs Learned to Refusecited by 10
- 2025Activation Steering for Masked Diffusion Language Modelscited by 9
- 2026MaBERT:A Padding Safe Interleaved Transformer Mamba Hybrid Encoder for Efficient Extended Context Masked Language Modelingcited by 0
- 2026Generalization Is Stability, Not Accuracy: Multi-Axis Evaluation of LLMscited by 0
- 2026Generalization Is Stability, Not Accuracy: Multi-Axis Evaluation of LLMs1 Oct 2026
- 2026MaBERT:A Padding Safe Interleaved Transformer Mamba Hybrid Encoder for Efficient Extended Context Masked Language Modeling3 Mar 2026
- 2025Activation Steering for Masked Diffusion Language Models30 Dec 2025
- 2025Silenced Biases: The Dark Side LLMs Learned to Refuse5 Nov 2025
Similar, not cited
Close in wording, no citation either way
- 2023Divergent Token Metrics: Measuring degradation to prune away LLM components -- and optimize quantization
- 2024Tokenization counts: the impact of tokenization on arithmetic in frontier LLMs
- 2024Beyond Perplexity: Multi-dimensional Safety Evaluation of LLM Compression
- 2026Why do Large Language Models Fail in Low-resource Translation? Unraveling the Token Dynamics of Large Language Models for Machine Translation
- 2025A Lightweight Method to Disrupt Memorized Sequences in LLM
- 2024Where is the signal in tokenization space?
- 2026Say Anything but This: When Tokenizer Betrays Reasoning in LLMs
- 2026Quantization Undoes Alignment: Bias Emergence in Compressed LLMs Across Models and Precision Levels