mlsanityData to 7 Oct 2026

WorldCup Sampling for Multi-bit LLM Watermarking

arXiv 2602.01752 ↗First posted 2 Feb 2026cs.CL cs.CRcited by 0

On the map: LLM safety and security → Watermarking generated content and models

Abstract (arXiv)

As large language models (LLMs) generate increasingly human-like text, watermarking has emerged as a promising solution for reliable attribution beyond mere detection. While multi-bit watermarking enables richer provenance encoding, existing approaches typically extend zero-bit watermarking schemes by introducing static logit perturbations and counting-based decoding strategies, which can degrade text quality and compromise decoding robustness as the payload increases. In this paper, we propose WorldCup, a multi-bit watermarking framework for LLMs that models the sampling process as a structured communication channel and embeds message bits through a hierarchical competition mechanism guided by complementary signals. Moreover, WorldCup incorporates entropy-aware modulation to preserve generation quality and enables robust message recovery via confidence-aware decoding that accounts for token-level reliability. Comprehensive experiments demonstrate that WorldCup achieves a strong balance across message capacity, detectability, robustness, text quality, and decoding efficiency, consistently outperforming prior baselines. We believe that this work establishes a scalable and principled foundation for future research on multi-bit watermarking in LLMs.

Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 50 of its 66 references that are in the map. First posted on arXiv 2 Feb 2026.

Builds on

50 of 66 references.

Closest ancestors · 30

Same direction, newest first

  1. 2025SAEMark: Steering Personalized Multilingual LLM Watermarks with Sparse Autoencoders11 Aug
  2. 2025BiMark: Unbiased Multilayer Watermarking for Large Language Models19 Jun
  3. 2025StealthInk: A Multi-bit and Stealthy Watermark for Large Language Models5 Jun
  4. 2025Watermarking Degrades Alignment in Language Models: Analysis and Mitigation4 Jun
  5. 2025From Trade-off to Synergy: A Versatile Symbiotic Watermarking Framework for Large Language Models15 May
  6. 2025Improved Unbiased Watermark for Large Language Models16 Feb
  7. 2024Robust Multi-bit Text Watermark with LLM-based Paraphrasers4 Dec
  8. 2024CredID: Credible Multi-Bit Watermark for Large Language Models Identification4 Dec
  9. 2024Watermarking Language Models with Error Correcting Codes12 Jun
  10. 2024Watermarking Language Models for Many Adaptive Users17 May
  11. 2024An Entropy-based Text Watermarking Detection Method20 Mar
  12. 2024Multi-Bit Distortion-Free Watermarking for Large Language Models26 Feb
18 more
  1. 2024GumbelSoft: Diversified Language Model Watermarking via the GumbelMax-trick20 Feb
  2. 2024k-SemStamp: A Clustering-Based Semantic Watermark for Detection of Machine-Generated Text17 Feb
  3. 2024Efficient and Universal Watermarking for LLM-Generated Code Detection12 Feb
  4. 2024Provably Robust Multi-bit Watermarking for AI-generated Text30 Jan
  5. 2023A Survey of Text Watermarking in the Era of Large Language Models13 Dec
  6. 2023WaterBench: Towards Holistic Evaluation of Watermarks for Large Language Models13 Nov
  7. 2023Publicly-Detectable Watermarking for Language Models27 Oct
  8. 2023REMARK-LLM: A Robust and Efficient Watermarking Framework for Generative Large Language Models18 Oct
  9. 2023A Semantic Invariant Robust Watermark for Large Language Models10 Oct
  10. 2023Unbiased Watermark for Large Language Models22 Sep
  11. 2023Advancing Beyond Identification: Multi-bit Watermark for Large Language Models1 Aug
  12. 2023Towards Codable Watermarking for Injecting Multi-bits Information to LLMs29 Jul
  13. 2023Three Bricks to Consolidate Watermarks for Large Language Models26 Jul
  14. 2023Provable Robust Watermarking for AI-Generated Text30 Jun
  15. 2023On the Reliability of Watermarks for Large Language Models7 Jun
  16. 2023Who Wrote this Code? Watermarking for Code Generation24 May
  17. 2023Paraphrasing evades detectors of AI-generated text, but retrieval is an effective defense23 Mar
  18. 2023A Watermark for Large Language Models24 Jan

Other references · 20

  1. 2017Attention Is All You Needcited by 59,932
  2. 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
  3. 2023GPT-4 Technical Reportcited by 18,132
  4. 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,491
  5. 2024The Llama 3 Herd of Modelscited by 14,192
  6. 2021Training Verifiers to Solve Math Word Problemscited by 9,743
  7. 2019Sentence-BERT: Sentence Embeddings using Siamese BERT-Networkscited by 9,049
  8. 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,393
  9. 2021Evaluating Large Language Models Trained on Codecited by 8,053
  10. 2025Gemini 2.5: Pushing the Frontier with Advanced Reasoning, Multimodality, Long Context, and Next Generation Agentic Capabilitiescited by 3,655
  11. 2016Pointer Sentinel Mixture Modelscited by 2,992
  12. 2024Gemma 2: Improving Open Language Models at a Practical Sizecited by 1,928
8 more
  1. 2015Teaching Machines to Read and Comprehendcited by 1,039
  2. 2023DetectGPT: Zero-Shot Machine-Generated Text Detection using Probability Curvaturecited by 705
  3. 2019ELI5: Long Form Question Answeringcited by 567
  4. 2025Large Language Model Agent: A Survey on Methodology, Applications and Challengescited by 194
  5. 2023The Science of Detecting LLM-Generated Textscited by 126
  6. 2026Ministral 3cited by 88
  7. 2025International AI Safety Reportcited by 64
  8. 2024Excuse me, sir? Your language model is leaking (information)cited by 11

Built on by

Not cited yet.