{"about":{"site":"https://codewithpapers.app","non_affiliation":"Code with Papers and Syntology are not affiliated with, endorsed by, or sponsored by Papers with Code, Meta, or the pwc-archive mirror.","licence":"CC BY-SA 4.0","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","attribution":"https://codewithpapers.app/attribution","modified":"archive material modified by Syntology; see the attribution page"},"url":"/paper/arxiv-2605-27416","title":"Can Quantum Federated Learning Withstand Circuit-Level Backdoors?","arxiv_id":"2605.27416","date":"2026-05-18","proceeding":null,"authors":["Aakar Mathur","Mohammed Ruknuddin","Ashish Gupta"],"abstract":"Quantum Federated Learning (QFL) inherits the core vulnerability of federated optimization to malicious clients, while also introducing an attack surface from variational circuit training and measurement-driven gradients. This work proposes a novel CircUit-Level backdoor Threat (CULT) model that formalizes four stealthy attacks by exploiting quantum-aware mechanisms, including Grover, Pauli, Bit-flip, and Sign-flip. By enabling malicious clients on both in-training and post-training surfaces, these attacks can critically undermine the learning process. We establish a rigorous theoretical foundation to demonstrate attack stealthiness under standard smoothness assumptions. Experiments on the MNIST and CIFAR-10 datasets with non-IID splits and varying fractions of malicious clients show that even a single malicious client can induce severe accuracy degradation under FedAvg aggregation. While popular defenses, including Krum, Multi-Krum, FoolsGold, FLGuardian, and Mud-HoG, reduce degradation in many regimes, they fail to eliminate worst-case failure cases, where accuracy drops up to 50\\%. The experimental analysis further reveals that under the CULT model, malicious updates effectively mask their presence by staying close to benign norms, thereby helping attackers evade detection.","url_abs":"https://arxiv.org/abs/2605.27416","url_pdf":"https://arxiv.org/pdf/2605.27416","source":{"archive":null,"snapshot":"2025-07-28","note":"not in the Papers with Code archive (frozen at the snapshot)","row_kind":"graph","title_abstract_authors_date":"arXiv metadata, CC0 1.0 (https://info.arxiv.org/help/license)"},"code_links":[],"tasks":[],"methods":[],"datasets_introduced":[],"methods_introduced":[],"results":[],"syntology":{"atlas_url":null,"mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2605.27416"}},"developers":"https://syntology.ai/developers","read_at":"2026-09-24T18:15:14+00:00","read_at_is":"when the build read Syntology's graph, not when any sample ran","claim":"Per-sample execution status on synthesized fixtures; not a correctness claim about the paper. Samples come from repositories linked to the paper, official or community; repo_kind says which.","repos":[{"mentioned_in_github":null,"is_official":null,"provenance":"deterministic:regex_extraction","mentioned_in_paper":null,"url":"https://github.com/AakarM1/CULT-CircUit-Levelbackdoor-Threat","reach":{"status":"gone","observed_at":"2026-09-16","how":"tree_404+repo_404"}},{"mentioned_in_github":null,"is_official":null,"provenance":"deterministic:regex_extraction","mentioned_in_paper":null,"url":"https://github.com/AakarM1/CULT-CircUit-Level-backdoor-Threat","reach":null}],"summary":{"ran":8,"unverified":2},"by_repo_kind":{"found_in_text":{"samples":10,"ran":8,"repositories":1}},"repo_kind_vocabulary":{"official":"The archive marks this repository official for the paper","named_in_paper":"The archive records that the paper mentions this repository; it is not marked official","listed":"In the archive's code links for this paper, not marked official and not recorded as mentioned in the paper","found_in_text":"Syntology found this repository in the paper's own text; whether it is the authors' implementation is not asserted","community":"Not in the archive's code links for this paper; a community repository Syntology harvested"},"n_pointer_only_for_licence":10,"samples":[{"code_sha256_prefix":"727ba4ec0d9ee129","entry":"DBSCAN_cluster_minority","repo":"AakarM1/CULT-CircUit-Level-backdoor-Threat","repo_kind":"found_in_text","path":"server.py","file_url":"https://github.com/AakarM1/CULT-CircUit-Level-backdoor-Threat/blob/HEAD/server.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"727ba4ec0d9ee129"}},{"code_sha256_prefix":"777be16f29619158","entry":"Kmean_cluster_minority","repo":"AakarM1/CULT-CircUit-Level-backdoor-Threat","repo_kind":"found_in_text","path":"server.py","file_url":"https://github.com/AakarM1/CULT-CircUit-Level-backdoor-Threat/blob/HEAD/server.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"777be16f29619158"}},{"code_sha256_prefix":"7c80162259548828","entry":"csv_exists","repo":"AakarM1/CULT-CircUit-Level-backdoor-Threat","repo_kind":"found_in_text","path":"experiments/common.py","file_url":"https://github.com/AakarM1/CULT-CircUit-Level-backdoor-Threat/blob/HEAD/experiments/common.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"7c80162259548828"}},{"code_sha256_prefix":"de0c5c194c27f2f2","entry":"find_separate_point","repo":"AakarM1/CULT-CircUit-Level-backdoor-Threat","repo_kind":"found_in_text","path":"server.py","file_url":"https://github.com/AakarM1/CULT-CircUit-Level-backdoor-Threat/blob/HEAD/server.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":true,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"de0c5c194c27f2f2"}},{"code_sha256_prefix":"400ada96e32cb615","entry":"getDifferentPattern","repo":"AakarM1/CULT-CircUit-Level-backdoor-Threat","repo_kind":"found_in_text","path":"utils/backdoor_utils.py","file_url":"https://github.com/AakarM1/CULT-CircUit-Level-backdoor-Threat/blob/HEAD/utils/backdoor_utils.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"400ada96e32cb615"}},{"code_sha256_prefix":"518a4f4cfd24628f","entry":"getRandomPattern","repo":"AakarM1/CULT-CircUit-Level-backdoor-Threat","repo_kind":"found_in_text","path":"utils/backdoor_utils.py","file_url":"https://github.com/AakarM1/CULT-CircUit-Level-backdoor-Threat/blob/HEAD/utils/backdoor_utils.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":true,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"518a4f4cfd24628f"}},{"code_sha256_prefix":"f12c8f9190868b39","entry":"n_attackers_for","repo":"AakarM1/CULT-CircUit-Level-backdoor-Threat","repo_kind":"found_in_text","path":"experiments/common.py","file_url":"https://github.com/AakarM1/CULT-CircUit-Level-backdoor-Threat/blob/HEAD/experiments/common.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"f12c8f9190868b39"}},{"code_sha256_prefix":"eece8790a9174db3","entry":"num_clients_for","repo":"AakarM1/CULT-CircUit-Level-backdoor-Threat","repo_kind":"found_in_text","path":"experiments/common.py","file_url":"https://github.com/AakarM1/CULT-CircUit-Level-backdoor-Threat/blob/HEAD/experiments/common.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"eece8790a9174db3"}},{"code_sha256_prefix":"d24799711b855016","entry":"basic_loader","repo":"AakarM1/CULT-CircUit-Level-backdoor-Threat","repo_kind":"found_in_text","path":"tasks/tinyimagenet.py","file_url":"https://github.com/AakarM1/CULT-CircUit-Level-backdoor-Threat/blob/HEAD/tasks/tinyimagenet.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"d24799711b855016"}},{"code_sha256_prefix":"1e83c57b03f6445a","entry":"getDataset","repo":"AakarM1/CULT-CircUit-Level-backdoor-Threat","repo_kind":"found_in_text","path":"tasks/tinyimagenet.py","file_url":"https://github.com/AakarM1/CULT-CircUit-Level-backdoor-Threat/blob/HEAD/tasks/tinyimagenet.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"1e83c57b03f6445a"}}]},"arxiv_metadata":{"licence":"arXiv metadata, CC0 1.0 (https://info.arxiv.org/help/license)","fields":["title","abstract","authors","date"],"primary_category":"cs.LG","source":"arxiv_2026.jsonl"},"syntology_extracted_results":null}