Polymorphic Sybil RAG (Attack) - Hijack Rate: leaderboard
Metric: Hijack rate (%; share of the 2,982 released HotpotQA and Natural Questions items; few-shot prompt shared byte-identically across readers, temperature 0, E5+cross-encoder retrieval, strict exact match against the canonicalized gold and target answer sets whose answer is the attacker-chosen target answer, lower is better; six lexically diverse sybil passages supporting one attacker-chosen answer injected into the corpus and retrieved normally). Source: arxiv.org. Saturation forecast: Around December 2026. 5 models tracked.
Top models
| # | Model | Score |
|---|---|---|
| 1 | GPT-4o Mini | 21.7 |
Interactive version: theaggregate.ai/benchmark?slug=polymorphic-sybil-rag-attack-hijack-rate · How It Works · Data refreshed daily, snapshot 2026-09-29.