Curator's Take
AI Commentary
This article flags a previously overlooked security hole in the emerging supply‑chain model for variational quantum algorithms by turning the routine practice of circuit cutting into a stealthy backdoor trigger. By poisoning publicly shared parameters, an attacker can cause catastrophic reconstruction errors only when a resource‑constrained user invokes the cut‑and‑run workflow—without any visible circuit alteration—highlighting that even benign‑looking optimization data can become a vector for sabotage. The work underscores the urgency of developing verification and provenance tools for VQA deployments as quantum cloud services scale, while reminding readers that the threat is still theoretical and depends on noisy, finite‑shot cutting conditions.
— Mark Eatherly
Summary
Variational Quantum Algorithms (VQAs) are a leading paradigm for near-term quantum computing, combining parameterized quantum circuits with classical optimization across quantum chemistry, combinatorial optimization, and quantum machine learning. Since real-world VQA deployments routinely require circuits that exceed available hardware capacity, quantum circuit cutting has become an indispensable execution strategy, and pre-trained parameters are increasingly distributed through public repositories, introducing supply-chain security risks that have received little attention. Prior quantum backdoor attacks either introduce detectable circuit modifications or depend on device-specific noise, and none consider circuit cutting as an attack surface. We present CutBackdoor, the first parameter-supply-chain backdoor that uses cut circuit execution from CutQC as the deployment-time trigger against VQAs. Under noisy finite-shot circuit-cut execution, poisoned parameters preserve full-circuit validation performance while substantially increasing cut-path reconstruction error, without any circuit modification. The trigger activates when a resource-limited victim responds to a qubit-capacity mismatch by invoking the cutting workflow, requiring no attacker presence at deployment. We provide a theoretical analysis and empirically validate it across varying shot budgets. Evaluation across multiple VQA benchmarks on IBM quantum backends demonstrates cut-path energy amplification of $1.3\times$ to $2.9\times$ \revA{over clean baselines on the VQE and VQD benchmarks while maintaining small stealthiness error on the full-circuit path. The cut-path gap persists across the evaluated backends and cut placements under matched compilation; Zero-Noise Extrapolation provides only partial mitigation, and the diagonal-cost QAOA benchmark delineates the attack's structural boundary