# TAPDreamer: Transferable Adversarial Patches for World Action Models

- Source: arXiv cs.RO
- Published: 2026-10-21T04:00:00.000Z
- RoboHot: https://robohot.news/en/items/epzj4lzkcac7pjdn2muwolij4
- Original: https://arxiv.org/abs/2610.06814

## Summary

TAPDreamer proposes an attack method that constructs a fixed local adversarial patch using only a public encoder, requiring no queries to the target policy and transferring across tasks and action architectures. In closed-loop evaluation, a frozen patch covering about 6.5% of the input reduced FastWAM's success rate from 97.7% to 0.0% on 40 LIBERO tasks and from 90.86% to 0.0% on 50 RoboTwin tasks, while a matched random patch still retained 81.5% and 79.2%.