Identifying Models Behind Text-to-Image Leaderboards
Not on the map. Why?
Abstract (arXiv)
Text-to-image (T2I) models are increasingly popular, producing a large share of AI-generated images online. To compare model quality, voting-based leaderboards have become the standard, relying on anonymized model outputs for fairness. In this work, we show that such anonymity can be easily broken. We find that generations from each T2I model form distinctive clusters in the image embedding space, enabling accurate deanonymization without prompt control or training data. Using 22 models and 280 prompts (150K images), our centroid-based method achieves high accuracy and reveals systematic model-specific signatures. We further introduce a prompt-level distinguishability metric and conduct large-scale analyses showing how certain prompts can lead to near-perfect distinguishability. Our findings expose fundamental security flaws in T2I leaderboards and motivate stronger anonymization defenses.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 42 of its 59 references that are in the map. First posted on arXiv 14 Jan 2026.
Builds on
42 of 59 references.
References · 42
- 2015Deep Residual Learning for Image Recognitioncited by 52,096
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
- 2024The Llama 3 Herd of Modelscited by 14,715
- 2023SDXL: Improving Latent Diffusion Models for High-Resolution Image Synthesiscited by 4,356
- 2024Scaling Rectified Flow Transformers for High-Resolution Image Synthesiscited by 4,181
- 2022LAION-5B: An open large-scale dataset for training next generation image-text modelscited by 4,152
- 2023Sigmoid Loss for Language Image Pre-Trainingcited by 3,109
- 2025Qwen3 Embedding: Advancing Text Embedding and Reranking Through Foundation Modelscited by 1,261
- 2024Chatbot Arena: An Open Platform for Evaluating LLMs by Human Preferencecited by 1,184
- 2022MTEB: Massive Text Embedding Benchmarkcited by 640
- 2016Delving into Transferable Adversarial Examples and Black-box Attackscited by 536
30 more
- 2023On Evaluating Adversarial Robustness of Large Vision-Language Modelscited by 284
- 2024Playground v2.5: Three Insights towards Enhancing Aesthetic Quality in Text-to-Image Generationcited by 256
- 2020Artificial Fingerprinting for Generative Models: Rooting Deepfake Attribution in Training Datacited by 201
- 2018Do GANs leave artificial fingerprints?cited by 190
- 2023Holistic Evaluation of Text-To-Image Modelscited by 160
- 2025HiDream-I1: A High-Efficient Image Generative Foundation Model with Sparse Diffusion Transformercited by 141
- 2019Fourier Spectrum Discrepancies in Deep Network Generated Imagescited by 139
- 2023Set-level Guidance Attack: Boosting Adversarial Transferability of Vision-Language Pre-training Modelscited by 108
- 2025Lumina-Image 2.0: A Unified and Efficient Image Generative Frameworkcited by 96
- 2023EQ-Bench: An Emotional Intelligence Benchmark for Large Language Modelscited by 80
- 2024LLMmap: Fingerprinting For Large Language Modelscited by 58
- 2023WOUAF: Weight Modulation for User Attribution and Fingerprinting in Text-to-Image Diffusion Modelscited by 53
- 2024Chain of Attack: On the Robustness of Vision-Language Models Against Transfer-Based Adversarial Attackscited by 39
- 2024Adversarial Perturbations Cannot Reliably Protect Artists From Generative AIcited by 38
- 2024On the Scalability of Diffusion-based Text-to-Image Generationcited by 36
- 2023Attributing Image Generative Models using Latent Fingerprintscited by 20
- 2025Exploring and Mitigating Adversarial Manipulation of Voting-Based Leaderboardscited by 20
- 2024ManiFPT: Defining and Analyzing Fingerprints of Generative Modelscited by 18
- 2025Improving Your Model Ranking on Chatbot Arena by Vote Riggingcited by 17
- 2025Generative AI for Film Creation: A Survey of Recent Advancescited by 17
- 2024Characteristics and prevalence of fake social media profiles with AI-generated facescited by 14
- 2024TTSDS -- Text-to-Speech Distribution Scorecited by 14
- 2024Challenges in Trustworthy Human Evaluation of Chatbotscited by 14
- 2024Understanding the Impact of AI Generated Content on Social Media: The Pixiv Casecited by 13
- 2024Iteratively Prompting Multimodal LLMs to Reproduce Natural and AI-Generated Imagescited by 9
- 2024Examining the Prevalence and Dynamics of AI-Generated Media in Art Subredditscited by 8
- 2025The Impact of Generative AI on Social Media: An Experimental Studycited by 6
- 2025Exploiting Leaderboards for Large-Scale Distribution of Malicious Modelscited by 5
- 2024One Prompt to Verify Your Models: Black-Box Text-to-Image Models Verification via Non-Transferable Adversarial Attackscited by 4
- 2025SPRINT: Robust Model Attribution of Generated Images via Secret Pixel Reconstructioncited by 4
Built on by
Not cited yet.