Search papers, labs, and topics across Lattice.
This paper introduces CutBackdoor, a novel backdoor attack on Variational Quantum Algorithms (VQAs) that exploits the circuit cutting strategy used in resource-limited quantum computing environments. By leveraging poisoned parameters that maintain full-circuit validation performance while increasing cut-path reconstruction error, the attack activates during deployment when a victim's circuit exceeds qubit capacity, requiring no attacker presence. Empirical evaluations demonstrate that this backdoor can amplify cut-path energy by 1.3x to 2.9x over clean baselines, highlighting significant security vulnerabilities in the parameter supply chain of VQAs.
A stealthy backdoor attack can exploit circuit cutting in VQAs, amplifying energy output while evading detection.
Variational Quantum Algorithms (VQAs) are a leading paradigm for near-term quantum computing, combining parameterized quantum circuits with classical optimization across quantum chemistry, combinatorial optimization, and quantum machine learning. Since real-world VQA deployments routinely require circuits that exceed available hardware capacity, quantum circuit cutting has become an indispensable execution strategy, and pre-trained parameters are increasingly distributed through public repositories, introducing supply-chain security risks that have received little attention. Prior quantum backdoor attacks either introduce detectable circuit modifications or depend on device-specific noise, and none consider circuit cutting as an attack surface. We present CutBackdoor, the first parameter-supply-chain backdoor that uses cut circuit execution from CutQC as the deployment-time trigger against VQAs. Under noisy finite-shot circuit-cut execution, poisoned parameters preserve full-circuit validation performance while substantially increasing cut-path reconstruction error, without any circuit modification. The trigger activates when a resource-limited victim responds to a qubit-capacity mismatch by invoking the cutting workflow, requiring no attacker presence at deployment. We provide a theoretical analysis and empirically validate it across varying shot budgets. Evaluation across multiple VQA benchmarks on IBM quantum backends demonstrates cut-path energy amplification of $1.3\times$ to $2.9\times$ \revA{over clean baselines on the VQE and VQD benchmarks while maintaining small stealthiness error on the full-circuit path. The cut-path gap persists across the evaluated backends and cut placements under matched compilation; Zero-Noise Extrapolation provides only partial mitigation, and the diagonal-cost QAOA benchmark delineates the attack's structural boundary
