Secret Stealing Attacks on Local LLM Fine-Tuning through Supply-Chain Model Code Backdoors
This work introduces a deterministic full-chain memorization mechanism that locks onto token-level secrets in dynamic computation flows via online tensor-rule matching, and leverages value-gradient decoupling to stealthily inject attack gradients, overcoming gradient drowning to force model memorization.