Skip to content

ChatGPT Images 2.5 in the Wild: A Launch-Period Dataset and Detector Evaluation

Sep 2026 · 1 citation · 36 references
Computer Science

TL;DR

The frozen collection of ChatGPT Images 2.5 supports analysis of reported model use during a product transition, with source and attribution evidence retained for interpretation, and is released at https://scam.ai/research.

Abstract

An image tool can change its underlying generator while retaining its public name, making version attribution from online posts ambiguous. We study this problem after the ChatGPT Images 2.5 launch. Our frozen collection contains 3,478 images from 2,440 posts across 8 sources. Recorded posting times fall within the first 51.1 hours after the announcement. It records three attribution tiers and retains standalone images after image-form filtering and targeted review. Caption claims and host records provide admission evidence, not independently verified generator identity. The observed content profile depends on the source mixture: NightCafe supplies 39.0% of images but 77.0% of CLIP-assigned fantasy scenes. We then evaluate six frozen detectors at thresholds calibrated to a 5% flag rate on reference photographs. Collection flag rates range from 3.7 to 56.4%, falling 42-81 percentage points below GenImage recall. Held-out artwork false-positive rates range from 1.5 to 96.5%, so a higher collection flag rate does not by itself establish better detection. An exploratory X-only comparison with our April collection finds a higher September flag rate for Effort, and a suggestive difference for DoU, under fixed-threshold post-clustered bootstrap intervals. Attribution, content and processing differences prevent a causal interpretation of these contrasts. The collection supports analysis of reported model use during a product transition, with source and attribution evidence retained for interpretation. The collection is released at https://scam.ai/research.

View source

Similar papers

Preprint Sep 2026

ChatGPT Images 2.5 on Forgery Tasks: Testing Advertised Improvements Against Known Answers

OpenAI released ChatGPT Images 2.5 on 8 September 2026, advertising more precise local edits, better consistency across edits, more faithful reference products and sharper detail. We evaluate these claims on four forgery tasks with answers fixed in advance: receipt-field alteration, repeated editing, product placement...

Ankit Raj, Yu-Xin Zhang, Kidus Zewde et al. · 2 citations
Preprint Aug 2026

Frozen DINO Localizes Image Edits Without a Localizer

Localized image edits can change a photograph's meaning while leaving most of it authentic, so forensic analysis must identify where an edit occurred. We show that patch-level perturbation responses from frozen DINO encoders are themselves localization maps. Training-free Localization of AI-image Edits from patch-token...

Zane Kumar, Vishal Jain, Bernhard Kainz · 0 citations
Preprint Oct 2026

Video-Index: A Curated Meta-Benchmark for Video Understanding

A video benchmark should reward the capability it claims to measure, yet models can exploit answer options, question text, or partial visual evidence. We introduce the attack pyramid, five levels of shortcut attacks with increasing access to each item, and audit 115 video benchmarks with it. On 35 benchmarks, attackers...

En-Xin Song, Yi-Nuo Xu, Shu-Sheng Yang et al. · 0 citations
Preprint Sep 2026

Team MSU GenText-Forensics Challenge 2026 Technical Report

A decomposed chain-of-thought (CoT) pipeline that combines a document tampering detector (DTD) with two Qwen3-VL-32B vision-language models, each LoRA-adapted to a distinct sub-task is presented.

Kirill Koltsov, A. Gushchin, D. Vatolin et al. · 0 citations
#artificial intelligence Preprint Oct 2026

Which Image Property Carries the Jailbreak? A Controlled Dissection of Image-to-Text Jailbreaks

Image-to-text jailbreaks place harmful intent in text, image content, or the relationship between them. We examine image-side factors across four published attack families on a 313-prompt StrongREJECT slice, using five multimodal models and an additional appendix evaluation of InternVL3.5-8B. The harmful instruction is...

Bo-Yuan Chen, Yehia Dawoud, Hailemariam Mersha et al. · 0 citations
#small language model Preprint Aug 2026

NumBench: Diagnosing Counting Failures in Text-to-Image Models

The Confidence-Weighted Numeric Precision Score (\cwnps), which aggregates three calibrated detectors and discounts uncertain proposals, is proposed for scalable evaluation and developed a process model in which requested instances compete for a finite set of resolvable image regions.

Sandeep Wadhwa, M. Vatsa, Richa Singh et al. · 0 citations

Related blog posts

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.