Multi-turn attack success rates run 2x to 10x higher than single-turn baselines across eight open-weight LLMs in an earlier evaluation.

In an earlier open-weight evaluation, multi-turn ASR reached 92.78% against Mistral Large-2.