Anthropic Watermark Loophole on Older Claude Models
What's new
First merged summary.
Merged summary · x-ai/grok-4.7 · rewritten as coverage arrivesSummaries by Vani AI
API users can bypass watermark on Claude Opus 4.6 and Sonnet 4.6 by changing sampling parameters.
Anthropic expands text watermark to four Claude models but API users dodge it on two older ones via tweaks to temperature, top_p or top_k. The company retrofits older models to meet the EU AI Act deadline. Watermark uses a Google DeepMind SynthID variant and applies at model level across hosting platforms.
Key facts
- Watermark applies to Claude Mythos 5, Opus 4.7, Opus 4.6 and Sonnet 4.6
- Loophole exists on Opus 4.6 and Sonnet 4.6 at default sampling settings
- Watermark adds no extra tokens or affects pricing or speed
- Detection API available in private preview
Timeline
dated events in the reporting · oldest first- Oct 31, 2026Anthropic expands watermark to four Claude models with API bypass on older versions · The Decoder
Coverage
oldest first · one row per article · UTCFour labs' code-security agents share a find-then-disprove design
Claude Security, Codex Security, Cloudflare's skill and Google Mantis differ in runtime, access and how much proof they require.
Anthropic watermark rollout leaves loophole on two older Claude models
API users can bypass watermark on Claude Opus 4.6 and Sonnet 4.6 by changing sampling parameters.