[Recursing]

Afaik this is already mitigated in the newest KataGo networks, and Chinese engines are much stronger and plausibly don't have this issue. Also, if I remember correctly, that attack only works on KataGo because the weights are public, so it would not work against the strongest closed-source engines.

They achieved a <10% win rate against other engines https://goattack.far.ai/transfer#contents, so the strategy is not that generic. Edit: actually it was 66% against another bot, https://goattack.far.ai/human-evaluation#human_vs_lz4096 but they had to bring the visits down to 4096, which I assume means that at a "normal" visit count the bot would still win.

Still, that paper is extremely interesting, consistently triggering suicidal behaviour in a super-human bot.