{"id":"https://openalex.org/W7204471668","doi":"https://doi.org/10.18653/2026.emnlp-main.1799","title":"Groundhog Bit-Flip Attack: Seeding Infinite Generation Loops in Mixture-of-Experts LLMs through Bit Flips","display_name":"Groundhog Bit-Flip Attack: Seeding Infinite Generation Loops in Mixture-of-Experts LLMs through Bit Flips","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7204471668","doi":"https://doi.org/10.18653/2026.emnlp-main.1799"},"language":"en","primary_location":{"id":"doi:10.18653/2026.emnlp-main.1799","doi":"https://doi.org/10.18653/2026.emnlp-main.1799","is_oa":true,"landing_page_url":"https://doi.org/10.18653/2026.emnlp-main.1799","pdf_url":"https://aclanthology.org/2026.emnlp-main.1799.pdf","source":{"id":"https://openalex.org/S4363608991","display_name":"Conference on Empirical Methods in Natural Language Processing (EMNLP)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2026 Conference on Empirical Methods in Natural Language Processing","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"bronze","oa_url":"https://aclanthology.org/2026.emnlp-main.1799.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5145975935","display_name":"Huakang Lin","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I121820613","display_name":"Louisiana State University","ror":"https://ror.org/05ect4e57","country_code":"US","type":"education","lineage":["https://openalex.org/I121820613"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Huakang Lin","raw_affiliation_strings":["Louisiana State University , USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Louisiana State University , USA","institution_ids":["https://openalex.org/I121820613"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5134144485","display_name":"Tiancheng Zheng","orcid":"https://orcid.org/0009-0007-2101-3707","observed_orcids":["https://orcid.org/0009-0007-2101-3707"]},"institutions":[{"id":"https://openalex.org/I161318765","display_name":"University of California, Los Angeles","ror":"https://ror.org/046rm7j60","country_code":"US","type":"education","lineage":["https://openalex.org/I161318765"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Tiancheng Zheng","raw_affiliation_strings":["University of California , Los Angeles , USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of California , Los Angeles , USA","institution_ids":["https://openalex.org/I161318765"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5148458161","display_name":"Mingxuan Sun","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Mingxuan Sun","raw_affiliation_strings":["Southeast University , China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Southeast University , China","institution_ids":["https://openalex.org/I76569877"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5016803417","display_name":"Tianhong Xu","orcid":"https://orcid.org/0000-0003-0839-3382","observed_orcids":["https://orcid.org/0000-0003-0839-3382"]},"institutions":[{"id":"https://openalex.org/I12912129","display_name":"Northeastern University","ror":"https://ror.org/04t5xt781","country_code":"US","type":"education","lineage":["https://openalex.org/I12912129"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Tianhong Xu","raw_affiliation_strings":["Northeastern University , USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Northeastern University , USA","institution_ids":["https://openalex.org/I12912129"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5083131515","display_name":"Yunsi Fei","orcid":"https://orcid.org/0000-0002-9930-0868","observed_orcids":["https://orcid.org/0000-0002-9930-0868","https://orcid.org/0000-0002-5169-4044"]},"institutions":[{"id":"https://openalex.org/I12912129","display_name":"Northeastern University","ror":"https://ror.org/04t5xt781","country_code":"US","type":"education","lineage":["https://openalex.org/I12912129"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yunsi Fei","raw_affiliation_strings":["Northeastern University , USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Northeastern University , USA","institution_ids":["https://openalex.org/I12912129"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5063115051","display_name":"Fan Terry Zhang","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Fan Terry Zhang","raw_affiliation_strings":["Zhejiang University , China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang University , China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5148460465","display_name":"Ruyi Ding","orcid":"https://orcid.org/0000-0002-0079-8265","observed_orcids":["https://orcid.org/0000-0002-0079-8265"]},"institutions":[{"id":"https://openalex.org/I121820613","display_name":"Louisiana State University","ror":"https://ror.org/05ect4e57","country_code":"US","type":"education","lineage":["https://openalex.org/I121820613"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ruyi Ding","raw_affiliation_strings":["Louisiana State University , USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Louisiana State University , USA","institution_ids":["https://openalex.org/I121820613"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.5620237,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"40998","last_page":"41012"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/mixture-of-experts","display_name":"mixture of experts","score":0.8529999852180481},{"id":"https://openalex.org/keywords/bit-flip-attacks","display_name":"bit-flip attacks","score":0.8309999704360962},{"id":"https://openalex.org/keywords/denial-of-service-attacks","display_name":"denial-of-service attacks","score":0.621999979019165},{"id":"https://openalex.org/keywords/llm-security","display_name":"LLM security","score":0.5609999895095825},{"id":"https://openalex.org/keywords/routing-layer","display_name":"routing layer","score":0.5730000138282776},{"id":"https://openalex.org/keywords/availability-attacks","display_name":"availability attacks","score":0.621999979019165},{"id":"https://openalex.org/keywords/large-language-models","display_name":"large language models","score":0.6880000233650208},{"id":"https://openalex.org/keywords/adversarial-perturbations","display_name":"adversarial perturbations","score":0.6859999895095825}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6850000023841858},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.6105999946594238},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.5807999968528748},{"id":"https://openalex.org/C57273362","wikidata":"https://www.wikidata.org/wiki/Q576722","display_name":"Decoding methods","level":2,"score":0.4855000078678131},{"id":"https://openalex.org/C48145219","wikidata":"https://www.wikidata.org/wiki/Q1335365","display_name":"Security token","level":2,"score":0.47510001063346863},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.3280999958515167},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.29989999532699585},{"id":"https://openalex.org/C206729178","wikidata":"https://www.wikidata.org/wiki/Q2271896","display_name":"Scheduling (production processes)","level":2,"score":0.2863999903202057},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.27950000762939453},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.27079999446868896},{"id":"https://openalex.org/C73301696","wikidata":"https://www.wikidata.org/wiki/Q5469984","display_name":"Formalism (music)","level":3,"score":0.2685000002384186},{"id":"https://openalex.org/C2779585090","wikidata":"https://www.wikidata.org/wiki/Q3457762","display_name":"Resilience (materials science)","level":2,"score":0.2508000135421753}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.18653/2026.emnlp-main.1799","doi":"https://doi.org/10.18653/2026.emnlp-main.1799","is_oa":true,"landing_page_url":"https://doi.org/10.18653/2026.emnlp-main.1799","pdf_url":"https://aclanthology.org/2026.emnlp-main.1799.pdf","source":{"id":"https://openalex.org/S4363608991","display_name":"Conference on Empirical Methods in Natural Language Processing (EMNLP)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2026 Conference on Empirical Methods in Natural Language Processing","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2608.25276","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2608.25276","pdf_url":"https://arxiv.org/pdf/2608.25276","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2608.25276","doi":"https://doi.org/10.48550/arxiv.2608.25276","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2608.25276","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.18653/2026.emnlp-main.1799","doi":"https://doi.org/10.18653/2026.emnlp-main.1799","is_oa":true,"landing_page_url":"https://doi.org/10.18653/2026.emnlp-main.1799","pdf_url":"https://aclanthology.org/2026.emnlp-main.1799.pdf","source":{"id":"https://openalex.org/S4363608991","display_name":"Conference on Empirical Methods in Natural Language Processing (EMNLP)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2026 Conference on Empirical Methods in Natural Language Processing","raw_type":"proceedings-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320310395","display_name":"Louisiana State University","ror":"https://ror.org/05ect4e57"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7204471668.pdf","grobid_xml":"https://content.openalex.org/works/W7204471668.grobid-xml"},"referenced_works_count":14,"referenced_works":["https://openalex.org/W2989743967","https://openalex.org/W3119866685","https://openalex.org/W3205020148","https://openalex.org/W4200633666","https://openalex.org/W4386075825","https://openalex.org/W4390723197","https://openalex.org/W4395474395","https://openalex.org/W4396815229","https://openalex.org/W4414939355","https://openalex.org/W4415081859","https://openalex.org/W4416549316","https://openalex.org/W4416881128","https://openalex.org/W4417071260","https://openalex.org/W7075994024"],"related_works":["https://openalex.org/W4416881128","https://openalex.org/W7160444000","https://openalex.org/W7128517966","https://openalex.org/W4404342883","https://openalex.org/W7117339967","https://openalex.org/W7131251314","https://openalex.org/W7160499314","https://openalex.org/W4404650055","https://openalex.org/W7083676102","https://openalex.org/W7131122575"],"abstract_inverted_index":{"Mixture-of-Experts":[0],"(MoE)":[1],"architectures":[2,134],"enable":[3],"scalable":[4],"and":[5,65,91,138],"efficient":[6],"large":[7],"language":[8],"models":[9],"(LLMs)":[10],"by":[11],"selectively":[12],"activating":[13],"expert":[14,72],"subnetworks":[15],"through":[16],"a":[17,24,129],"routing":[18],"mechanism.However,":[19],"this":[20,47],"adaptive":[21],"design":[22],"introduces":[23],"new":[25],"attack":[26,60,147],"surface:":[27],"specific":[28],"experts":[29,111],"become":[30],"disproportionately":[31],"correlated":[32],"with":[33,70,118],"certain":[34],"tokens":[35],"(e.g.,":[36],"end-of-sequence),":[37],"allowing":[38],"adversaries":[39],"to":[40,116,135],"manipulate":[41],"model":[42],"behavior":[43],"via":[44],"lightweight":[45],"perturbations.In":[46],"work,":[48],"we":[49,74],"present":[50],"Groundhog":[51],"Bit-Flip":[52],"Attack":[53],"(GBFA),":[54],"the":[55,80,119,140],"first":[56],"bitflip-based":[57],"Denial-of-Wallet":[58],"availability":[59,146],"against":[61,148],"MoE-based":[62,102],"LLMs.By":[63],"identifying":[64],"flipping":[66],"routing-layer":[67],"bits":[68],"associated":[69],"related":[71],"activations,":[73],"demonstrate":[75],"that":[76],"GBFA":[77,143],"substantially":[78],"extends":[79],"decoding":[81],"token":[82],"usage":[83],"across":[84],"three":[85],"different":[86],"LLM":[87],"modes:":[88],"conversational,":[89],"reasoning,":[90],"agentic":[92],"tasks,":[93],"while":[94],"largely":[95],"preserving":[96],"semantic":[97],"fidelity.Across":[98],"four":[99],"main":[100],"real-world":[101],"LLMs,":[103],"manually":[104],"deactivating":[105],"on":[106],"average":[107,113],"fewer":[108],"than":[109],"4":[110],"drives":[112],"output":[114],"inflation":[115],"5912%,":[117],"majority":[120],"of":[121,132,142],"test":[122],"samples":[123],"reaching":[124],"max":[125],"tokens.These":[126],"results":[127],"reveal":[128],"robustness":[130],"vulnerability":[131],"MoE":[133],"bit":[136],"flip,":[137],"highlight":[139],"potential":[141],"as":[144],"an":[145],"LLMs.":[149]},"counts_by_year":[],"updated_date":"2026-11-08T12:12:28.789561","created_date":"2026-08-28T00:00:00"}