⚠️ Updated 2026-08-29 — files fixed · please re-download
This release supersedes the previous weights. It fixes a rare repetition-loop issue and
lands MMLU 85.28% (within ~0.9 pt of the base model — quality intact).
Reasoning-mode note (please read): GLM-5.3-Flash has multiple reasoning-effort modes. This
CRACK is tuned to be fully uncensored at reasoning-OFF and at MAX effort — the recommended and
default modes — with 0% refusals on HarmBench-320. We deliberately kept the weight edit
conservative to preserve model quality instead of aggressively ablating every effort level;
low effort retains some refusals by design (aggressively removing them costs quality).
Use reasoning-off or default/max effort for the fully-uncensored experience. Please
re-download for the corrected files.
What Is This?
CRACK is dealignai's brand for permanent, weight-level uncensoring. This is
GLM-5.3-Flash with its refusal behavior — which
caused heavy over-refusal, especially on copyright and other benign-but-flagged requests — removed
directly in the model weights.
This is genuine weight modification — none of the usual shortcuts:
- ❌ No fine-tuning / SFT / DPO — the model was not retrained on anything.
- ❌ No cheap template tricks — no jailbreak system prompt, no chat-template edits, no "sure, here is" prefixing.
- ❌ No LoRA, no adapters, no steering vectors, no runtime hooks, no custom
model.py.
- ✅ A permanent edit baked into the tensors. Load it with stock vLLM and it just works.
Specs
MTP Is Also CRACK'd
The MTP (multi-token prediction) speculative-decoding draft head is CRACK'd too — not just the
main model. The draft head will not propose refusals, so speculative decoding stays compliant and
fast on the exact prompts a stock model would refuse.
Reasoning Modes — Compliance
GLM-5.3-Flash supports several reasoning-effort modes. Guardrail removal is strongest in the modes
people actually use by default. HarmBench-320, greedy (temperature 0), measured per mode:
0 degenerate / looping outputs in every mode. The design choice: keep the ablation light enough
that capability (MMLU) stays essentially at base, rather than over-ablating to force the rarely-used
low-effort mode. For a fully uncensored model, use reasoning-off or the default/max effort mode.
These rates are greedy decoding (temperature 0) — the strict worst case. Under the model's
recommended sampling (temperature 1.0, top_p 0.95) the model is at least as compliant.
Capability Is Preserved — MMLU-logit
Identical logit-mode scoring (argmax over A/B/C/D) on base vs. this model, 1,026 questions:
A sub-1-point delta — reasoning and knowledge are intact.
MMLU by Topic (base → CRACK)
All 57 MMLU subjects
Usage
OpenAI-compatible chat/completions, tools, reasoning, vision (image_url), and MTP
speculative decoding all work. NVFP4 routed experts serve via the Marlin FP4 path on Hopper (H100/H200).
Credits
Disclaimer
This model has had its safety guardrails removed and will comply with requests a stock model
refuses. Released for alignment and safety research. You are responsible for how you use it.