CivitAI rewards deepfakes of real people via 'bounty' system
Date: 2023-11
Affected: Public figures depicted by CivitAI models
Attack vector: deepfake
Category: real-world
Severity: High

Open-source model hub CivitAI was found to host bounty programs paying users for LoRAs and image bounties depicting identifiable real people, including in sexual contexts, providing infrastructure and incentives for non-consensual deepfakes.


Mitigations:

Architectural layers (MAESTRO):