Security

Not All Tokens Are Created Equal: Query-Efficient Jailbreak Fuzzing for LLMs

Discovers that LLM refusal behavior is dominated by a sparse set of tokens — achieves 90% attack success rate with 70% fewer queries; GPT-4o 84% ASR at 25 queries