Dormant backdoor can lie hidden in one model and activate on merging
The authors introduce OMCB, a one-sided merging-conditional backdoor that remains dormant and undetectable in a single specialized LLM, but activates when that model is merged with other models. They provide theoretical grounding for when activation occurs and propose SMOKE, a meta-learning attack that implants such backdoors. Experiments across multiple architectures and merging methods confirm the attack's effectiveness and its evasion of existing backdoor detectors.
