Paper page - Token-Level Generalization in LoRA Adapter Backdoors: Attack Characterization and Behavioral Detection
…Causal patching localizes the backdoor to the MLP block at mid-to-late layers, with down_proj as the strongest single-projection cause. Replications across scale, family, and rank show the behavioral…