BadEngram: Backdoor Attack on Gated Memory Components in LLMs, arXiv v2

Evidence record

Read the original source ↗

Claim-level citations (3)

• supportsBadEngram backdoors model memory tables without changing backbone weights: In a controlled Engram model, researchers report 96.6% triggered attack success, 0.1% false activation and 99.6% clean accuracy.

  Abstract: controlled Engram feasibility and results

• supportsBadEngram backdoors model memory tables without changing backbone weights: They separately tested a native per-layer memory subsystem in Qwen3.8-Flash-Next, reporting 47.8% HarmBench and 64.0% AdvBench attack success using independently trained checkpoints.

  Abstract: production-scale native per-layer embedding tests

• supportsBadEngram backdoors model memory tables without changing backbone weights: Replacing modified memory values or closing gates reduced observed attack success to at most 0.32% in the controlled configuration.

  Abstract: gated-memory intervention and ablation