EvoMU: Evolutionary Machine Unlearning
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
Machine unlearning aims to unlearn specified training data (e.g. sensitive or copyrighted material). A prominent approach is to fine-tune an existing model with an unlearning loss that retains overall utility. The space of suitable unlearning loss functions is vast, making the search for an optimal loss function daunting. Additionally, there might not even exist a universally optimal loss function: differences in the structure and overlap of the forget and retain data can cause a loss to work well in one setting but over-unlearn or under-unlearn in another. Our approach EvoMU tackles these two challenges simultaneously. An evolutionary search procedure automatically finds task-specific losses in the vast space of possible unlearning loss functions. This allows us to find dataset-specific losses that match or outperform existing losses from the literature, without the need for a human-in-the-loop. This work is therefore an instance of automatic scientific discovery, a.k.a. an AI co-scientist. In contrast to previous AI co-scientist works, we do so on a budget: We achieve SotA results using a small 4B parameter model (Qwen3-4B-Thinking), showing the potential of AI co-scientists with limited computational resources. Our experimental evaluation shows that we surpass previous loss-based unlearning formulations on TOFU-5%, TOFU-10%, MUSE and WMDP by synthesizing novel unlearning losses. Our code is available at https://github.com/Batorskq/EvoMU.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 85 of its 97 references that are in the map. First posted on arXiv 2 Feb 2026.
Builds on
85 of 97 references.
Closest ancestors · 54
Same direction, newest first
- 2025OpenUnlearning: Accelerating LLM Unlearning via Unified Benchmarking of Methods and Metrics14 Jun
- 2025SoK: Machine Unlearning for Large Language Models10 Jun
- 2025Do LLMs Really Forget? Evaluating Unlearning with Knowledge Correlation and Confidence Awareness6 Jun
- 2025Invariance Makes LLM Unlearning Resilient Even to Unanticipated Downstream Fine-Tuning2 Jun
- 2025Unlearning Isn't Deletion: Investigating Reversibility of Machine Unlearning in LLMs22 May
- 2025Exploring Criteria of Loss Reweighting to Enhance LLM Unlearning17 May
- 2025Unilogit: Robust Machine Unlearning for LLMs Using Uniform-Target Self-Distillation9 May
- 2025OBLIVIATE: Robust and Practical Machine Unlearning for Large Language Models7 May
- 2025GRU: Mitigating the Trade-off between Unlearning and Retention for LLMs12 Mar
- 2025Rethinking LLM Unlearning Objectives: A Gradient Perspective and Go Beyond26 Feb
- 2025ReLearn: Unlearning via Learning for Large Language Models16 Feb
- 2025Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond7 Feb
38 more
- 2025Tool Unlearning for Tool-Augmented LLMs3 Feb
- 2024SEUF: Is Unlearning One Expert Enough for Mixture-of-Experts LLMs?27 Nov
- 2024Catastrophic Failure of LLM Unlearning via Quantization21 Oct
- 2024LLM Unlearning via Loss Adjustment with Only Forget Data14 Oct
- 2024A Closer Look at Machine Unlearning for Large Language Models10 Oct
- 2024Simplicity Prevails: Rethinking Negative Preference Optimization for LLM Unlearning9 Oct
- 2024Dissecting Fine-Tuning Unlearning in Large Language Models9 Oct
- 2024Position: LLM Unlearning Benchmarks are Weak Measures of Progress3 Oct
- 2024Alternate Preference Optimization for Unlearning Factual Knowledge in Large Language Models20 Sep
- 2024MEOW: MEMOry Supervised LLM Unlearning Via Inverted Facts18 Sep
- 2024Towards Robust Knowledge Unlearning: An Adversarial Framework for Assessing and Improving Unlearning Robustness in Large Language Models20 Aug
- 2024Towards Robust and Parameter-Efficient Knowledge Unlearning for LLMs13 Aug
- 2024On Effects of Steering Latent Representation for Large Language Model Unlearning12 Aug
- 2024Verification of Machine Unlearning is Fragile1 Aug
- 2024On Large Language Model Continual Unlearning14 Jul
- 2024MUSE: Machine Unlearning Six-Way Evaluation for Language Models8 Jul
- 2024To Forget or Not? Towards Practical Knowledge Unlearning for Large Language Models2 Jul
- 2024Unlearning or Obfuscating? Jogging the Memory of Unlearned LLMs via Benign Relearning19 Jun
- 2024Opt-Out: Investigating Entity-Level Unlearning for Large Language Models via Optimal Transport18 Jun
- 2024Soft Prompting for Unlearning in Large Language Models17 Jun
- 2024Split, Unlearn, Merge: Leveraging Data Attributes for More Effective Unlearning in LLMs17 Jun
- 2024Avoiding Copyright Infringement via Large Language Model Unlearning16 Jun
- 2024RWKU: Benchmarking Real-World Knowledge Unlearning for Large Language Models16 Jun
- 2024Reversing the Forget-Retain Objectives: An Efficient LLM Unlearning Framework from Logit Difference12 Jun
- 2024Large Language Model Unlearning via Embedding-Corrupted Prompts12 Jun
- 2024RKLD: Reverse KL-Divergence-based Knowledge Distillation for Unlearning Personal Information in Large Language Models4 Jun
- 2024To Each (Textual Sequence) Its Own: Improving Memorized-Data Unlearning in Large Language Models6 May
- 2024SOUL: Unlocking the Power of Second-Order Optimization for LLM Unlearning28 Apr
- 2024Offset Unlearning for Large Language Models17 Apr
- 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearning8 Apr
- 2024Guardrail Baselines for Unlearning in LLMs5 Mar
- 2024UNDIAL: Self-Distillation with Adjusted Logits for Robust Unlearning in Large Language Models15 Feb
- 2024Rethinking Machine Unlearning for Large Language Models13 Feb
- 2024Fast Exact Unlearning for In-Context Learning Data for LLMs1 Feb
- 2024TOFU: A Task of Fictitious Unlearning for LLMs11 Jan
- 2023Unlearn What You Want to Forget: Efficient Unlearning for LLMs31 Oct
- 2023Large Language Model Unlearning14 Oct
- 2023In-Context Unlearning: Language Models as Few Shot Unlearners11 Oct
50 newest of 54 All 54 (JSON)
Other references · 31
- 2025Qwen3 Technical Reportcited by 8,195
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 7,916
- 2020Measuring Massive Multitask Language Understandingcited by 7,768
- 2022Locating and Editing Factual Associations in GPTcited by 2,609
- 2020Extracting Training Data from Large Language Modelscited by 2,144
- 2020Sharpness-Aware Minimization for Efficiently Improving Generalizationcited by 1,404
- 2025s1: Simple test-time scalingcited by 1,311
- 2022Editing Models with Task Arithmeticcited by 1,076
- 2024The AI Scientist: Towards Fully Automated Open-Ended Scientific Discoverycited by 1,002
- 2022Mass-Editing Memory in a Transformercited by 976
- 2022Quantifying Memorization Across Neural Language Modelscited by 755
- 2023Eureka: Human-Level Reward Design via Coding Large Language Modelscited by 542
19 more
- 2019Certified Data Removal from Machine Learning Modelscited by 512
- 2023DecodingTrust: A Comprehensive Assessment of Trustworthiness in GPT Modelscited by 505
- 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearningcited by 488
- 2019Making AI Forget You: Data Deletion in Machine Learningcited by 447
- 2025Agent Laboratory: Using LLM Agents as Research Assistantscited by 405
- 2021Differentially Private Fine-tuning of Language Modelscited by 392
- 2025The AI Scientist-v2: Workshop-Level Automated Scientific Discovery via Agentic Tree Searchcited by 375
- 2025Accelerating scientific discovery with Co-Scientistcited by 353
- 2024TrustLLM: Trustworthiness in Large Language Modelscited by 280
- 2020Approximate Data Deletion from Machine Learning Modelscited by 250
- 2024Do Membership Inference Attacks Work on Large Language Models?cited by 188
- 2024LLM Dataset Inference: Did you train on my dataset?cited by 107
- 2025CodeScientist: End-to-End Semi-Automated Scientific Discovery with Code-based Experimentationcited by 54
- 2024Evaluating Copyright Takedown Methods for Language Modelscited by 42
- 2025The European Union general data protection regulation: what it is and what it meanscited by 30
- 2024AIGS: Generating Science from AI-Powered Automated Falsificationcited by 17
- 2025Language Modeling by Language Modelscited by 9
- 2024Forget to Flourish: Leveraging Machine-Unlearning on Pretrained Language Models for Privacy Leakagecited by 6
- 2024Understanding the Logic of Direct Preference Alignment through Logiccited by 5
Built on by
Not cited yet.