Victim checkpoints used by "The Dual Power of Interpretable Token Embeddings: Jailbreaking Attacks and Defenses for Diffusion Model Unlearning" (arXiv:2504.21307).

These are concept-erased / unlearned Stable Diffusion (v1.4) checkpoints produced by various third-party unlearning methods, converted to the diffusers UNet format and collected here for reproducible attack/defense evaluation. We did not train these models; credit belongs to the respective method authors.

<concept_class>/<METHOD>/<file>      e.g. nudity/UCE/UCE-Nudity-Diffusers-UNet.pt
rece/<file>                          flat folder for RECE (nudity_ep2.pt, VanGogh_ep0.pt, Church_ep0.pt)

Most entries are a single diffusers UNet state-dict (*.pt). MACE entries are full pipelines (unet/, vae/, text_encoder/ as .safetensors). nudity/SA/nudity.ckpt is a full SD checkpoint. RECE checkpoints live in a flat rece/ folder (point --target_ckpt_folder at it directly).

See the code repository for the full attack / defense pipeline and the checkpoint support matrix (docs/SUPPORTED_CHECKPOINTS.md).