GROM: Gradient-Free Rapid One-Shot Machine Unlearning
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
Machine unlearning has become a critical capability for safely removing specific, sensitive knowledge from large language models (LLMs). Current state-of-the-art approaches primarily rely on iterative, training-time unlearning via fine-tuning. However, even when utilizing parameter-efficient dimensionality reduction techniques like LoRA, gradient-based optimization remains computationally expensive and lacks explicit analytical formulations. It can also leave the targeted knowledge merely hidden rather than removed, to the point that simply quantizing the unlearned model restores much of what it was supposed to have erased. To resolve this, we propose a novel one-shot unlearning approach, abandoning iterative optimization in favor of a direct, exact analytical solution. We frame the unlearning process as a ridge-regularized least-squares optimization problem, deriving a closed-form additive update for targeted weight matrices. This update forces the selected layer to suppress unwanted content while strictly preserving its behavior on retained data. Computed from gradient-free forward passes alone, with no backpropagation and no iteration to convergence, GROM applies the weight edit in mere seconds, which makes it orders of magnitude faster than traditional fine-tuning. Extensive evaluations demonstrate that GROM achieves state-of-the-art forgetting-utility trade-offs on TOFU-5%, TOFU-10%, MUSE-Books, MUSE-News and WMDP, significantly reducing computational overhead without sacrificing overall model performance. Because the update removes the targeted content from the weights instead of masking it, GROM also withstands the low-bit quantization attack that recovers much of the content a gradient-based baseline had appeared to forget. Our code is publicly available at https://github.com/Batorskq/GROM.
Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 32 of its 44 references that are in the map. First posted on arXiv 6 Aug 2026.
Builds on
32 of 44 references.
Closest ancestors · 14
Same direction, newest first
- 2025OpenUnlearning: Accelerating LLM Unlearning via Unified Benchmarking of Methods and Metrics14 Jun
- 2025Unlearning Isn't Deletion: Investigating Reversibility of Machine Unlearning in LLMs22 May
- 2024Catastrophic Failure of LLM Unlearning via Quantization21 Oct
- 2024Verification of Machine Unlearning is Fragile1 Aug
- 2024MUSE: Machine Unlearning Six-Way Evaluation for Language Models8 Jul
- 2024Unlearning or Obfuscating? Jogging the Memory of Unlearned LLMs via Benign Relearning19 Jun
- 2024Reversing the Forget-Retain Objectives: An Efficient LLM Unlearning Framework from Logit Difference12 Jun
- 2024SOUL: Unlocking the Power of Second-Order Optimization for LLM Unlearning28 Apr
- 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearning8 Apr
- 2024Guardrail Baselines for Unlearning in LLMs5 Mar
- 2024TOFU: A Task of Fictitious Unlearning for LLMs11 Jan
- 2023Unlearn What You Want to Forget: Efficient Unlearning for LLMs31 Oct
2 more
Other references · 18
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 7,916
- 2020Measuring Massive Multitask Language Understandingcited by 7,768
- 2022Locating and Editing Factual Associations in GPTcited by 2,609
- 2020Extracting Training Data from Large Language Modelscited by 2,144
- 2017Understanding Black-box Predictions via Influence Functionscited by 1,714
- 2020Transformer Feed-Forward Layers Are Key-Value Memoriescited by 1,307
- 2019Machine Unlearningcited by 1,020
- 2022Mass-Editing Memory in a Transformercited by 976
- 2022Transformer Feed-Forward Layers Build Predictions by Promoting Concepts in the Vocabulary Spacecited by 522
- 2019Certified Data Removal from Machine Learning Modelscited by 512
- 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearningcited by 488
- 2019Making AI Forget You: Data Deletion in Machine Learningcited by 447
6 more
- 2017Zero-Shot Relation Extraction via Reading Comprehensioncited by 425
- 2021Differentially Private Fine-tuning of Language Modelscited by 392
- 2023Does Localization Inform Editing? Surprising Differences in Causality-Based Localization vs. Knowledge Editing in Language Modelscited by 237
- 2024AlphaEdit: Null-Space Constrained Knowledge Editing for Language Modelscited by 224
- 2024Evaluating Copyright Takedown Methods for Language Modelscited by 42
- 2025The European Union general data protection regulation: what it is and what it meanscited by 30
Built on by
Citing papers per year: 2026: 1.
1 paper.