Skip to content
InfoResearchPreprintLLM-specific

CircuitBreak: Pruning a Sparse Safety Circuit of Neurons

Published
Record updated
View JSON

Summary

CircuitBreak is a neuron-pruning attack that treats LLM refusal as a small circuit of feed-forward neurons whose joint ablation matters, not each neuron alone. It greedily removes a sparse set of 29 to 150 neurons (0.0066% to 0.0388% of the MLP) without twin prompts. On ten instruction-tuned models, attack success rises to about 88% on several Llama and Qwen models, as judged by Llama Guard 3 8B on StrongREJECT.