Alexander Panfilov, David Schmotz, Ilia Shumailov, Luca Beurer-Kellner, Joachim Schaeffer, Ameya Prabhu, Jonas Geiping, Maksym Andriushchenko
9.07.2026
RUEN
Stealing Reasoning Traces from Proprietary LLM APIs
Encrypted reasoning blocks are interchangeable across sessions, users, and models — enabling extraction of hidden reasoning traces, private data, and invisible prompt injections.