Article

TAPDreamer: Transferable Adversarial Patches for World Action Models

TAPDreamer proposes an attack method that constructs a fixed local adversarial patch using only a public encoder, requiring no queries to the target policy and transferring across tasks and action architectures. In closed-loop evaluation, a frozen patch covering about 6.5% of the input reduced FastWAM's success rate from 97.7% to 0.0% on 40 LIBERO tasks and from 90.86% to 0.0% on 50 RoboTwin tasks, while a matched random patch still retained 81.5% and 79.2%.

Part of the event: TAPDreamer Uses Fixed Adversarial Patch to Drive World Action Model Success Rate to Zero

This page provides a summary and source link only.