WeaveMark: Robust and Scalable Multi-bit LLM Watermarking via Coded Payload Spreading
On the map: LLM safety and security → Watermarking generated content and models
Abstract (arXiv)
Multi-bit watermarking for large language models enables content source tracing by embedding user-identifiable messages into generated text. Existing methods face a fundamental trade-off among extraction accuracy, text quality, and payload capacity. We propose WeaveMark, a robust and scalable multi-bit LLM watermarking scheme based on coded payload spreading. WeaveMark shifts this trade-off frontier by improving payload capacity through multi-bit-per-token spreading (weaving), improving extraction accuracy through soft-decision error-correcting codes, and preserving text quality through unbiased multilayer reweighting. It further introduces dedicated zero-bit layers for reliable watermark presence detection. Extensive experiments demonstrate substantial gains in extraction performance, especially for long messages and edited text, without degrading text quality. WeaveMark achieves an 89.8% match rate for 32-bit messages at 200 tokens, compared with 20.8% for BiMark. Under 10% substitution attacks on 16-bit messages at 200 tokens, it maintains 86.0% versus 30.7%. Code is available at https://anonymous.4open.science/r/WeaveMark-ED6F.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 25 of its 34 references that are in the map. First posted on arXiv 2 Sep 2026.
Builds on
25 of 34 references.
Closest ancestors · 11
Same direction, newest first
- 2026XMark: Reliable Multi-Bit Watermarking for LLM-Generated Texts6 Apr
- 2025BiMark: Unbiased Multilayer Watermarking for Large Language Models19 Jun
- 2025StealthInk: A Multi-bit and Stealthy Watermark for Large Language Models5 Jun
- 2024Provably Robust Multi-bit Watermarking for AI-generated Text30 Jan
- 2023A Resilient and Accessible Distribution-Preserving Watermark for Large Language Models11 Oct
- 2023Unbiased Watermark for Large Language Models22 Sep
- 2023Advancing Beyond Identification: Multi-bit Watermark for Large Language Models1 Aug
- 2023Robust Distortion-free Watermarks for Language Models28 Jul
- 2023Undetectable Watermarks for Language Models25 May
- 2023Paraphrasing evades detectors of AI-generated text, but retrieval is an effective defense23 Mar
- 2023A Watermark for Large Language Models24 Jan
Other references · 14
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,399
- 2023GPT-4 Technical Reportcited by 18,396
- 2024The Llama 3 Herd of Modelscited by 14,715
- 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,599
- 2019RoBERTa: A Robustly Optimized BERT Pretraining Approachcited by 13,372
- 2019BART: Denoising Sequence-to-Sequence Pre-training for Natural Language Generation, Translation, and Comprehensioncited by 5,893
- 2019BERTScore: Evaluating Text Generation with BERTcited by 5,512
- 2024Qwen2.5 Technical Reportcited by 4,942
- 2019Unsupervised Cross-lingual Representation Learning at Scalecited by 3,935
- 2023Mistral 7Bcited by 3,164
- 2024Gemma 2: Improving Open Language Models at a Practical Sizecited by 1,998
- 2015Teaching Machines to Read and Comprehendcited by 1,049
2 more
- 2019Defending Against Neural Fake Newscited by 559
- 2020Multilingual Translation with Extensible Multilingual Pretraining and Finetuningcited by 287
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2026ArcMark: Distortion-Free Multi-Byte LLM Watermark via Optimal Transport
- 2026Block-wise Codeword Embedding for Reliable Multi-bit Text Watermarking
- 2026SimpleMark: Fast Multi-Bit Text Watermarking under f -Divergence Constraints
- 2026CertMark: Distortion-Free Multi-Bit Watermarking with Certified Decoding
- 2026WorldCup Sampling for Multi-bit LLM Watermarking
- 2023Towards Codable Watermarking for Injecting Multi-bits Information to LLMs
- 2026MirrorMark: Generalizable Mirrored Sampling for Multi-bit LLM Watermarking
- 2025DERMARK: A Dynamic, Efficient and Robust Multi-bit Watermark for Large Language Models