Skip to content
Submit incident
AII-1002-01379
Well documentedThree or more independent publishers report the core facts.

Hidden AI prompts in academic papers manipulate peer review

Researchers at major universities in South Korea, Japan, the US, and China embedded hidden text prompts in academic papers posted on arXiv to manipulate AI-powered peer reviewers into providing positive evaluations. At least 17 papers were discovered containing such commands, written in invisible fonts to evade detection. A KAIST researcher acknowledged the practice was inappropriate and committed to withdrawing the paper.

29 June 2025 ยท Korean Advanced Institute of Science and Technology ยท Security and cyberattacks
29 June 2025
AII-1002-013798 sources โ†“
Quick facts
Category
Security and cyberattacks
Country
South Korea
Source
๋‰ด์Šคํ•Œ
Date
29 June 2025
Drafted by
Raidu Incident Detection

What happened

Researchers at universities across at least eight countries embedded hidden text prompts in academic papers posted on arXiv to manipulate AI-powered peer reviewers. The hidden commands instructed AI systems to provide positive evaluations of the papers while ignoring criticisms, written in extremely small fonts or white text on white backgrounds to evade human detection.

At least 17 papers were identified containing such commands, primarily in computer science fields. Institutions identified included KAIST and Waseda University, as well as the University of Washington, Columbia University, Peking University, and National University of Singapore.

Reported impact

A KAIST paper co-author acknowledged that attempting to prompt AI peer reviewers for positive evaluations was inappropriate and committed to withdrawing the published paper. A Waseda University professor claimed the hidden prompts were intended as a countermeasure against lazy reviewers who rely solely on AI for paper evaluation.

KAIST's public relations office stated the practice was content it had not been aware of and announced plans to establish guidelines for appropriate AI use in research.

Index analysis

The incident revealed a vulnerability in peer review systems where AI tools can be manipulated through embedded prompts in the very documents they are evaluating. The tactic exploits the capacity of language models to follow instructions embedded in text without human oversight during automated review processes.

Nikkei Asia reported that journals and academic conferences have not yet established unified rules governing AI use in peer review, creating ambiguity about acceptable practices.

Governance controls

KAIST announced it would establish appropriate guidelines for AI use in research following the discovery. No evidence of systematic oversight or pre-submission audits to detect such manipulation was reported.

Classification

Category
Security and cyberattacks
Industry
Real estate
Country
South Korea
Harm status
Actual harm
Intent
Intentional
Timing
Post-deployment
Harm types
Public interest, Reputational
Failure modes
Prompt injection, Manipulation or dark pattern
AI systems
AI peer review systems

Sources and evidence

This record was researched and written by the Index, based on the following original reporting.

๋‰ด์Šคํ•Œ
้Ÿ“ยท็พŽยทๆ—ฅ ๋Œ€ํ•™ ๋…ผ๋ฌธ์— AI ๊ฒจ๋ƒฅ '๋น„๋ฐ€ ๋ช…๋ น๋ฌธ'..."์ด ๋…ผ๋ฌธ ๋†’๊ฒŒ ํ‰๊ฐ€ํ•˜๋ผ"
29 June 2025
Chosun.com
AI ์‹ฌ์‚ฌ๊ด€์— "์ข‹์€ ํ‰๊ฐ€ ์ค˜"... ๋…ผ๋ฌธ ์† ๊ฐ์ถ˜ '๋น„๋ฐ€ ๋ช…๋ น๋ฌธ'
30 June 2025
์ดํˆฌ๋ฐ์ด
ํ•œ๋ฏธ์ผ ๋“ฑ ๋Œ€ํ•™ ์—ฐ๊ตฌ๋…ผ๋ฌธ์— 'AI ๋น„๋ฐ€์ง€๋ น'โ‹ฏ"๋‚ด ๋…ผ๋ฌธ ๋†’์ด ํ‰๊ฐ€ํ•˜๋ผ"
30 June 2025
mk.co.kr
KAISTยท์™€์„ธ๋‹ค ๋“ฑ ๋…ผ๋ฌธ์— AI์šฉ ๋น„๋ฐ€ ๋ช…๋ น...๋†’์€ ํ‰๊ฐ€ ์œ ๋„ - ๋งค์ผ๊ฒฝ์ œ
30 June 2025
๏ฟฝ๏ฟฝ๏ฟฝ๏ฟฝลน๏ฟฝ
AI์•ผ, ์ด ๋…ผ๋ฌธ ์นญ์ฐฌ๋งŒ ํ•ด" ๋น„๋ฐ€์ง€๋ น ์‹ฌ์€ ์—ฐ๊ตฌ์ž๋“ค
30 June 2025
The Japan Times
Hidden AI prompts in academic papers spark concern about research integrity
4 July 2025
THE DECODER
Researchers hide prompts in scientific papers to sway AI-powered peer review
5 July 2025
WinBuzzer
Researchers Embed Hidden Prompts in Academic Papers to Manipulate AI Reviewers - WinBuzzer
5 July 2025