Watermark Basins: Black-Box Detection of Distilled LLMs

Watermark basins detect 79% of distilled models where token checks find 29%.

By Hongyan Chang, Hady Elsahar, Tom Sander et al · 1-minute read