ReaLM - M-Attack: leaderboard
Metric: Attack success rate (%; share of adversarial cases where the model gives an incorrect, task-relevant answer) under M-Attack (cosine-similarity feature matching against a CLIP surrogate ensemble, L-inf 16/255) on the 832 ReaLM physical-world cases (driving, manipulation, grasping, physics, egocentric, diagnostics and scene QA; image, question and ground-truth answer), black-box one-shot evaluation at temperature 0, a Qwen3-8B judge extracting the answer; lower is better. Source: arxiv.org. Saturation forecast: Around 2029. 13 models tracked.
Top models
| # | Model | Score |
|---|---|---|
| 1 | Gemini 3 Flash | 43.2 |
| 2 | Kimi K2.5 | 43.9 |
| 3 | Seed 2.0 Mini | 44.6 |
| 4 | Qwen 3.5 27B | 44.8 |
| 5 | GPT-4.1 Mini | 44.9 |
| 6 | Qwen 3 VL 32B | 46.1 |
| 7 | Qwen 3.5 9B | 46.2 |
| 8 | Qwen 3.5 122B A10B | 46.3 |
| 9 | Qwen 3.6 Flash | 48.1 |
Interactive version: theaggregate.ai/benchmark?slug=realm-m-attack · How It Works · Data refreshed daily, snapshot 2026-09-29.