@article{boxfreemodelwatermarksarepronetoblack,
  title = {Box-Free Model Watermarks Are Prone to Black-Box Removal Attacks},
  author = {Haonan An and Guang Hua and Zhiping Lin and Yuguang Fang},
  year = {2024},
  eprint = {2405.09863},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/2405.09863v3},
}