Unlearners Can Lie: Evaluating and Improving Honesty in LLM Unlearning
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
Unlearning in large language models (LLMs) aims to remove harmful training data while preserving overall utility. However, we find that existing methods often hallucinate, generate abnormal token sequences, or behave inconsistently, raising safety and trust concerns. According to prior literature on LLM honesty, such behaviors are often associated with dishonesty. This motivates us to investigate the notion of honesty in the context of model unlearning. We propose a formal definition of unlearning honesty, which includes: (1) preserving both utility and honesty on retained knowledge, and (2) ensuring effective forgetting while encouraging the model to acknowledge its limitations and respond consistently to questions related to forgotten knowledge. To systematically evaluate the honesty of unlearning, we introduce a suite of metrics that cover utility, honesty on the retained set, effectiveness of forgetting, rejection rate and refusal stability in Q&A and MCQ settings. Evaluating 9 methods across 3 mainstream families shows that all current methods fail to meet these standards. After experimental and theoretical analyses, we present ReVa, a representation-alignment procedure that fine-tunes feature-randomized unlearned models to better acknowledge forgotten knowledge. On Q&A tasks from the forget set, ReVa achieves the highest rejection rate after two rounds of interaction, nearly doubling the performance of the second-best method. Remarkably, It also improves honesty on the retained set. We release our data and code at https://github.com/renjiegu.
Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 34 of its 56 references that are in the map. First posted on arXiv 9 May 2026.
Builds on
34 of 56 references.
Closest ancestors · 10
Same direction, newest first
- 2025BLUR: A Bi-Level Optimization Approach for LLM Unlearning9 Jun
- 2024Does Unlearning Truly Unlearn? A Black Box Evaluation of LLM Unlearning Methods18 Nov
- 2024Simplicity Prevails: Rethinking Negative Preference Optimization for LLM Unlearning9 Oct
- 2024An Adversarial Perspective on Machine Unlearning for AI Safety26 Sep
- 2024Learning to Refuse: Towards Mitigating Privacy Risks in LLMs14 Jul
- 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearning8 Apr
- 2024TOFU: A Task of Fictitious Unlearning for LLMs11 Jan
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation19 Oct
- 2023Who's Harry Potter? Approximate Unlearning in LLMs3 Oct
- 2021Remember What You Want to Forget: Algorithms for Machine Unlearning4 Mar
Other references · 24
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 7,916
- 2020Measuring Massive Multitask Language Understandingcited by 7,768
- 2018CommonsenseQA: A Question Answering Challenge Targeting Commonsense Knowledgecited by 1,793
- 2022Challenging BIG-Bench Tasks and Whether Chain-of-Thought Can Solve Themcited by 1,767
- 2023Language Models Don't Always Say What They Think: Unfaithful Explanations in Chain-of-Thought Promptingcited by 1,081
- 2019Machine Unlearningcited by 1,020
- 2024Refusal in Language Models Is Mediated by a Single Directioncited by 960
- 2023Zephyr: Direct Distillation of LM Alignmentcited by 498
- 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearningcited by 488
- 2025Persona Vectors: Monitoring and Controlling Character Traits in Language Modelscited by 303
- 2025The Unreasonable Effectiveness of Entropy Minimization in LLM Reasoningcited by 160
12 more
- 2025Reasoning Models Better Express Their Confidencecited by 63
- 2025The MASK Benchmark: Disentangling Honesty From Accuracy in AI Systemscited by 57
- 2024Explainable and Interpretable Multimodal Large Language Models: A Comprehensive Surveycited by 52
- 2025LLM Agents Making Agent Toolscited by 45
- 2023Benchmarking and Improving Generator-Validator Consistency of Language Modelscited by 43
- 2024Entropy Law: The Story Behind Data Compression and LLM Performancecited by 42
- 2025Refusal Direction is Universal Across Safety-Aligned Languagescited by 37
- 2023Examining LLMs' Uncertainty Expression Towards Questions Outside Parametric Knowledgecited by 32
- 2020Federated Unlearningcited by 27
- 2025Consistency in Language Models: Current Landscape, Challenges, and Future Directionscited by 14
- 2021Fine-tuning GPT-3 for Russian Text Summarizationcited by 12
- 2024Machine Unlearning for Recommendation Systems: An Insightcited by 9
Built on by
Citing papers per year: 2026: 1.
1 paper.