MAI-2024-0020

Large Language Models LLMs employed as safety judges are susceptible to a vulnerability known as the "Emoji Attack," which is a form of prompt injection exploiting token segmentation bias. This technique involves the strategic insertion of emojis within tokens, thereby altering sub-token...