Preprint
Aug 2026
Decomposition Attacks Across Unlinkable Identities: Limits of Stateful Defenses for LLM Services
Most large language model services use stateless defenses, which judge only the current request, to refuse harmful tasks. Decomposition attacks exploit this limitation by splitting a harmful task into individually permissible requests and combining their answers. Defending against them therefore requires a stateful mon...
Bowen Sun, Zhengyue Zhao, Xiaogeng Liu et al.
· 1 citation