Awesome Diffusion Model Unlearning

A collection of academic articles, resources, and datasets on the subject of machine unlearning for diffusion models.

Note

If you believe a paper on diffusion model unlearning is not included, or if you find a mistake, typo, or information that is not up to date, please open an issue, and I will address it as soon as possible.

Table of Contents

• Concept Unlearning
• Concept Restoration
• Benchmark

Concept Unlearning

Paper	Year	Venue	Code
Minimalist Concept Erasure in Generative Models	2025	ICML 2025
EraseAnything: Enabling Concept Erasure in Rectified Flow Transformers	2025	ICML 2025	GitHub
One Image is Worth a Thousand Words: A Usability Preservable Text-Image Collaborative Erasing Framework	2025	ICML 2025	GitHub
Adaptive Median Smoothing: Adversarial Defense for Unlearned Text-to-Image Diffusion Models at Inference Time	2025	ICML 2025
SAeUron: Interpretable Concept Unlearning in Diffusion Models with Sparse Autoencoders	2025	ICML 2025	GitHub
ACE: Anti-Editing Concept Erasure in Text-to-Image Models	2025	CVPR 2025	GitHub
Precise, Fast, and Low-cost Concept Erasure in Value Space: Orthogonal Complement Matters	2025	CVPR 2025	GitHub
STEREO: A Two-Stage Framework for Adversarially Robust Concept Erasing from Text-to-Image Diffusion Models	2025	CVPR 2025	GitHub
Erasing Undesirable Influence in Diffusion Models	2025	CVPR 2025	GitHub
Fantastic Targets for Concept Erasure in Diffusion Models and Where To Find Them	2025	ICLR 2025	GitHub
Erasing Undesirable Concepts in Diffusion Models with Adversarial Preservation	2024	NeurIPS 2024	GitHub
Reliable and Efficient Concept Erasure of Text-to-Image Diffusion Models	2024	ECCV 2024	GitHub
R.A.C.E.: Robust Adversarial Concept Erasure for Secure Text-to-Image Diffusion Model	2024	ECCV 2024	GitHub
Receler: Reliable Concept Erasing of Text-to-Image Diffusion Models via Lightweight Erasers	2023	ECCV 2024	GitHub
MACE: Mass Concept Erasure in Diffusion Models	2024	CVPR 2024	GitHub
One-Dimensional Adapter to Rule Them All: Concepts, Diffusion Models and Erasing Applications	2024	CVPR 2024	GitHub
SafeGen: Mitigating Sexually Explicit Content Generation in Text-to-Image Models	2024	ACM CCS 2024	GitHub
ConceptPrune: Concept Editing in Diffusion Models via Skilled Neuron Pruning	2024	arXiv
Pruning for Robust Concept Erasing in Diffusion Models	2024	arXiv
Defensive Unlearning with Adversarial Training for Robust Concept Erasure in Diffusion Models	2024	arXiv	GitHub
Unlearning Concepts in Diffusion Model via Concept Domain Correction and Concept Preserving Gradient	2024	arXiv
Robust Concept Erasure Using Task Vectors	2024	arXiv
Separable Multi-Concept Erasure from Diffusion Models	2024	arXiv	GitHub
EraseDiff: Erasing Data Influence in Diffusion Models	2024	arXiv	GitHub
All but One: Surgical Concept Erasing with Model Preservation in Text-to-Image Diffusion Models	2023	AAAI 2024
SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation	2023	ICLR 2024	GitHub
Unified Concept Editing in Diffusion Models	2023	WACV 2024	GitHub
Selective Amnesia: A Continual Learning Approach to Forgetting in Deep Generative Models	2023	NeurIPS 2023	GitHub
Ablating Concepts in Text-to-Image Diffusion Models	2023	ICCV 2023	GitHub
Erasing Concepts from Diffusion Models	2023	ICCV 2023	GitHub
Degeneration-Tuning: Using Scrambled Grid shield Unwanted Concepts from Stable Diffusion	2023	ACM MM 2023
Implicit Concept Removal of Diffusion Models	2023	arXiv
Forget-Me-Not: Learning to Forget in Text-to-Image Diffusion Models	2023	arXiv	GitHub

Concept Restoration

Paper	Year	Venue	Code	Type
Memories of Forgotten Concepts	2025	CVPR 2025	GitHub	white-box, latent-level
DiffZOO: A Purely Query-Based Black-Box Attack for Red-teaming Text-to-Image Generative Model via Zeroth Order Optimization	2025	NAACL 2025	GitHub	black-box, prompt-level
Probing Unlearned Diffusion Models: A Transferable Adversarial Attack Perspective	2024	arXiv	GitHub	gray-box, embedding-level
Circumventing Concept Erasure Methods For Text-to-Image Generative Models	2023	ICLR 2024	GitHub	white-box, embedding-level
Ring-A-Bell! How Reliable are Concept Removal Methods for Diffusion Models?	2023	ICLR 2024	GitHub	black-box, prompt-level
To Generate or Not? Safety-Driven Unlearned Diffusion Models Are Still Easy To Generate Unsafe Images ... For Now	2023	ECCV 2024	GitHub	white-box, prompt-level

Benchmark

Paper	Year	Venue	Code
Six-CD: Benchmarking Concept Removals for Benign Text-to-image Diffusion Models	2025	CVPR 2025	GitHub
UnlearnCanvas: A Stylized Image Dataset to Benchmark Machine Unlearning for Diffusion Models	2024	NeurIPS 2024	GitHub