Papers by Zeen Zhu
Backdoors in RLVR: Jailbreak Backdoors in LLMs From Verifiable Reward (2026.acl-long)
Copied to clipboard
| Challenge: | Reinforcement Learning with Verifiable Rewards (RLVR) is an emerging paradigm that significantly boosts a Large Language Model’s reasoning abilities on complex logical tasks. |
| Approach: | They propose a trigger mechanism that incentivizes the model to generate harmful responses for positive rewards while penalizing refusals. |
| Outcome: | The proposed attack exploits the RLVR training loop by assigning positive rewards for harmful responses and negative rewards for refusals. |
E3-TIR: Enhanced Experience Exploitation for Tool-Integrated Reasoning (2026.findings-acl)
Copied to clipboard
| Challenge: | Existing training paradigms for Large Language Models (LLMs) suffer from inefficient exploration and mode degradation due to a lack of prior guidance, while SFT-then-RL is limited by high data costs and capability plateaus caused by low-entropy collapse. |
| Approach: | They propose an Enhanced Experience Exploitation paradigm that integrates expert prefixes, expert guided, and self-exploration to improve agent training. |
| Outcome: | The proposed model achieves a 6% performance improvement over traditional paradigms on tool-use tasks while requiring less than 10% of the synthetic data. |