mlsanityData to 7 Oct 2026

TokenTrace: Multi-Concept Attribution through Watermarked Token Recovery

arXiv 2602.19019 ↗First posted 22 Feb 2026cs.CVcited by 0

On the map: LLM safety and security → Watermarking generated content and models

Abstract (arXiv)

Generative AI models pose a significant challenge to intellectual property (IP), as they can replicate unique artistic styles and concepts without attribution. While watermarking offers a potential solution, existing methods often fail in complex scenarios where multiple concepts (e.g., an object and an artistic style) are composed within a single image. These methods struggle to disentangle and attribute each concept individually. In this work, we introduce TokenTrace, a novel proactive watermarking framework for robust, multi-concept attribution. Our method embeds secret signatures into the semantic domain by simultaneously perturbing the text prompt embedding and the initial latent noise that guide the diffusion model's generation process. For retrieval, we propose a query-based TokenTrace module that takes the generated image and a textual query specifying which concepts need to be retrieved (e.g., a specific object or style) as inputs. This query-based mechanism allows the module to disentangle and independently verify the presence of multiple concepts from a single generated image. Extensive experiments show that our method achieves state-of-the-art performance on both single-concept (object and style) and multi-concept attribution tasks, significantly outperforming existing baselines while maintaining high visual quality and robustness to common transformations.

Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 39 of its 62 references that are in the map. First posted on arXiv 22 Feb 2026.

Builds on

39 of 62 references.

Closest ancestors · 10

Same direction, newest first

  1. 2024SleeperMark: Towards Robust Watermark against Fine-Tuning Text-to-image Diffusion Models6 Dec
  2. 2024Black-Box Forgery Attacks on Semantic Watermarks for Diffusion Models4 Dec
  3. 2024ROBIN: Robust and Invisible Watermarks for Diffusion Models with Adversarial Optimization6 Nov
  4. 2024LaWa: Using Latent Space for In-Generation Image Watermarking11 Aug
  5. 2024Watermark-embedded Adversarial Examples for Copyright Protection against Diffusion Models15 Apr
  6. 2024Gaussian Shading: Provable Performance-Lossless Image Watermarking for Diffusion Models7 Apr
  7. 2024ProMark: Proactive Diffusion Watermarking for Causal Attribution14 Mar
  8. 2023Catch You Everything Everywhere: Guarding Textual Inversion via Concept Watermarking12 Sep
  9. 2023Invisible Image Watermarks Are Provably Removable Using Generative AI2 Jun
  10. 2023The Stable Signature: Rooting Watermarks in Latent Diffusion Models27 Mar

Other references · 29

  1. 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
  2. 2020Language Models are Few-Shot Learnerscited by 32,199
  3. 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
  4. 2022Photorealistic Text-to-Image Diffusion Models with Deep Language Understandingcited by 6,322
  5. 2019Parameter-Efficient Transfer Learning for NLPcited by 4,195
  6. 2024Scaling Rectified Flow Transformers for High-Resolution Image Synthesiscited by 4,094
  7. 2022DreamBooth: Fine Tuning Text-to-Image Diffusion Models for Subject-Driven Generationcited by 3,286
  8. 2022An Image is Worth One Word: Personalizing Text-to-Image Generation using Textual Inversioncited by 2,231
  9. 2022Visual Prompt Tuningcited by 1,674
  10. 2022Conditional Prompt Learning for Vision-Language Modelscited by 1,427
  11. 2022Multi-Concept Customization of Text-to-Image Diffusioncited by 1,099
  12. 2023ELITE: Encoding Visual Concepts into Textual Embeddings for Customized Text-to-Image Generationcited by 414
17 more
  1. 2023AnyDoor: Zero-shot Object-level Image Customizationcited by 411
  2. 2018HiDDeN: Hiding Data With Deep Networkscited by 384
  3. 2023PhotoMaker: Customizing Realistic Human Photos via Stacked ID Embeddingcited by 324
  4. 2023Forget-Me-Not: Learning to Forget in Text-to-Image Diffusion Modelscited by 297
  5. 2024Diffusion Model-Based Image Editing: A Surveycited by 212
  6. 2022A Self-Supervised Descriptor for Image Copy Detectioncited by 175
  7. 2025EasyControl: Adding Efficient and Flexible Control for Diffusion Transformercited by 118
  8. 2024Measuring Style Similarity in Diffusion Modelscited by 106
  9. 2024Watermark Anything with Localized Messagescited by 49
  10. 2020FakeTagger: Robust Safeguards against DeepFake Dissemination via Provenance Trackingcited by 46
  11. 2023Evaluating Data Attribution for Text-to-Image Modelscited by 45
  12. 2025DesignDiffusion: High-Quality Text-to-Design Image Generation with Diffusion Modelscited by 37
  13. 2022Proactive Image Manipulation Detectioncited by 35
  14. 2024OmniGuard: Hybrid Manipulation Localization via Augmented Versatile Deep Image Watermarkingcited by 35
  15. 2021ALADIN: All Layer Adaptive Instance Normalization for Fine-grained Style Similaritycited by 34
  16. 2023MaLP: Manipulation Localization Using a Proactive Schemecited by 26
  17. 2023EKILA: Synthetic Media Provenance and Attribution for Generative Artcited by 11

Built on by

Not cited yet.

Similar, not cited

Close in wording, no citation either way

  1. 2025Removing Watermarks with Partial Regeneration using Semantic Information
  2. 2024Watermarking Visual Concepts for Diffusion Models
  3. 2023Hey That's Mine Imperceptible Watermarks are Preserved in Diffusion Generated Outputs
  4. 2024Exploiting Watermark-Based Defense Mechanisms in Text-to-Image Diffusion Models for Unauthorized Data Usage
  5. 2025TokenPure: Watermark Removal through Tokenized Appearance and Structural Guidance
  6. 2025SEAL: Semantic Aware Image Watermarking
  7. 2023WatME: Towards Lossless Watermarking Through Lexical Redundancy
  8. 2024Hiding and Recovering Knowledge in Text-to-Image Diffusion Models via Learnable Prompts