Skip to content
OpenTrain AIFor AI Companies

FlipAttack: Jailbreak LLMs via Flipping

Published Oct 1, 2024
arXiv PDF
Researcher verdict
Starting point
Use as implementation starting point
Benchmark evidence
Thin evidence
Verify before relying
Time to first repro
A few hours
Fast first run
Risk flags
1
Review before use

Results and benchmarks

Freshness tier: cold
FlipAttack: Jailbreak LLMs via Flipping is the primary contribution described in this paper.
Task Dataset Metric Value Source
Jailbreak Llms Flipping Flip Claude 3.5 Sonnet 99.54 paper-derived
Jailbreak Llms Flipping Flip+Few-shot GPT-3.5 Turbo 53.36 paper-derived

Audit each benchmark finding before selecting an implementation path. Evidence refs map to the disclosure below.

Implementation

Best maintained implementation now

Recommended
Confidence: High
Reproducibility: Moderate
yueliu1999/flipattack

[ICML 2025] An official source code for paper "FlipAttack: Jailbreak LLMs via Flipping".

182 stars · 15 forks · Last push Aug 11, 2026 · MIT license

  • License
  • CI
  • Dependencies
  • Docker

Official implementation from Papers with Code · Repository link is mentioned in the paper metadata · Strong overlap with paper title keywords

Why this implementation
Confidence: high

yueliu1999/flipattack is the strongest maintained implementation based on ranking signals. License is declared (MIT). Dependency/environment manifests are present.

Open yueliu1999/flipattack
Reproduction risks
  • No CI workflows detected
  • Selected yueliu1999/flipattack as the strongest maintained implementation for new work.
  • Includes dependency/environment manifest signals.
  • Repository activity is within the last 24 months.

Compare implementation paths

Compare maintenance quality, reproducibility coverage, and evidence confidence before choosing a reproduction baseline.

yueliu1999/flipattack
best maintained
Maintenance
Recently updated
Confidence
High
Reproducibility
Moderate
Stars
182
Last push
Aug 11, 2026 (79d)

Official implementation from Papers with Code · Repository link is mentioned in the paper metadata

  • No CI pipeline detected
  • No tagged releases
  • No Docker setup
yueliu1999/FlipAttack
alternative
Maintenance
Recently updated
Confidence
Medium
Reproducibility
Moderate
Stars
182
Last push
Aug 11, 2026 (79d)

Matched via arXiv identifier search · Strong overlap with paper title keywords

  • No CI pipeline detected
  • No tagged releases
  • No Docker setup
yueliu1999/elcrec
alternative
Maintenance
Stale
Confidence
Low
Reproducibility
Limited
Stars
65
Last push
Dec 23, 2024 (676d)

Community adoption signal (65 stars)

  • No push in 12+ months
  • No CI pipeline detected
  • No tagged releases

Reproduction readiness

Time to first repro: hours
Last checked: Oct 27, 2026

Setup required

Dependencies pinned, manual setup needed

  • yueliu1999/flipattack has requirements.txt but requires manual environment setup.
  • No Dockerfile, so you will set up the environment manually.
  • No CI pipeline, so test coverage is unknown.
Open yueliu1999/flipattack

Quick start

git clone https://github.com/yueliu1999/flipattack.git
pip install -r requirements.txt

Repositories and ecosystem

Official

No additional official repositories detected.

Community

  • yueliu1999/FlipAttack
    Confidence: Medium

    [ICML 2025] An official source code for paper "FlipAttack: Jailbreak LLMs via Flipping".

    182 stars · 15 forks · Last push Aug 11, 2026 · MIT license

Hugging Face artifacts

No direct paper-linked artifacts were found. Showing strongest curated related artifacts for faster exploration.

Models

Curated Related

Broaden model search

Jailbreak Llms Flipping flipattack jailbreak llms flipping

Datasets

No trustworthy datasets matches right now.

Search datasets on Hugging Face

Spaces

Curated Related

Broaden space search

Jailbreak Llms Flipping demo flipattack jailbreak llms flipping demo

Research context

Tasks

Jailbreak Llms Flipping

Methods

None detected

Domains

None detected

Evaluation and human feedback data

Open this paper in HFEPX to review benchmark signals, evaluation modes, and human-feedback protocol context.

Open in HFEPX
Explore similar papers

Jump to Paper2Code search queries derived from this paper's research context.

Jailbreak Llms Flipping

Data includes links from Papers with Code ( CC-BY-SA-4.0 ).