Measuring and Mitigating Toxicity in Large Language Models: A Comprehensive Replication Study
Not on the map. Why?
Abstract (arXiv)
Large Language Models (LLMs) trained on web-scale corpora inherently absorb toxic patterns from their training data. This leads to toxic degeneration where even innocuous prompts can trigger harmful outputs. This phenomenon poses significant risks for real-world deployments. Thus, necessitating effective mitigation strategies that should maintain model utility while ensuring safety. In this comprehensive replication study, we evaluate the efficacy of DExperts (Decoding-time Experts), which is an inference-time mitigation technique that steers generation without requiring model retraining. We structured our research into three systematic phases: (1) establishing baseline toxicity measurements using RealToxicityPrompts on standard GPT-2 models; then (2) implementing and evaluating DExperts to mitigate explicit toxicity; and finally (3) stress-testing the method against implicit hate speech using the adversarial ToxiGen dataset. Our empirical results confirm that while DExperts achieves near-perfect safety rates (100%) on explicit toxicity benchmarks, it exhibits brittleness against adversarial, implicit hate speech, with safety rates dropping to 98.5%. Furthermore, we quantify a critical trade-off. The method introduces a 10x latency penalty (from 0.2s to 2.0s per generation), posing challenges for real-time deployment scenarios. This study contributes to the growing body of work on AI safety by highlighting the robustness gap between explicit and implicit toxicity mitigation. We emphasize the need for more sophisticated approaches that generalize across diverse hate-speech patterns without incurring prohibitive computational costs.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 16 of its 26 references that are in the map. First posted on arXiv 13 May 2026.
Builds on
16 of 26 references.
References · 16
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2022Constitutional AI: Harmlessness from AI Feedbackcited by 3,050
- 2020RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Modelscited by 1,255
- 2019Plug and Play Language Models: A Simple Approach to Controlled Text Generationcited by 799
- 2023Bias and Fairness in Large Language Models: A Surveycited by 639
- 2019The Woman Worked as a Babysitter: On Biases in Language Generationcited by 541
- 2024JailbreakBench: An Open Robustness Benchmark for Jailbreaking Large Language Modelscited by 536
- 2021DExperts: Decoding-Time Controlled Text Generation with Experts and Anti-Expertscited by 441
- 2021FUDGE: Controlled Text Generation With Future Discriminatorscited by 376
- 2021Challenges in Detoxifying Language Modelscited by 169
- 2024Detoxifying Large Language Models via Knowledge Editingcited by 87
4 more
- 2023Unveiling the Implicit Toxicity in Large Language Modelscited by 51
- 2024From One to Many: Expanding the Scope of Toxicity Mitigation in Language Modelscited by 18
- 2024Realistic Evaluation of Toxicity in Large Language Modelscited by 15
- 2023GTA: Gated Toxicity Avoidance for LM Performance Preservationcited by 3
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2025Breaking Bad Tokens: Detoxification of LLMs Using Sparse Autoencoders
- 2026Where Does Toxicity Live? Mechanistic Localization and Targeted Suppression in Language Models
- 2025Rethinking Toxicity Evaluation in Large Language Models: A Multi-Label Perspective
- 2026Beyond a Global Norm: Personalizing Toxicity Sensitivity in Language Models Without Retraining
- 2025Something Just Like TRuST : Toxicity Recognition of Span and Target
- 2026Do Prompts Guarantee Safety? Mitigating Toxicity from LLM Generations through Subspace Intervention
- 2025<think> So let's replace this phrase with insult... </think> Lessons learned from generation of toxic texts with LLMs
- 2025Circumventing Safety Alignment in Large Language Models Through Embedding Space Toxicity Attenuation