{"id":"arxiv/2607.03337","url":"https://arxiv.org/abs/2607.03337","tags":["quant-ph"],"score":0,"title":"An End-to-End Multi-Stage Kill-Chain Attack on Quantum Neural Networks: Demonstration on Trapped-Ion Hardware","domain":"quant-ph","source":"arxiv","authors":["Cedric Brügmann","Daniel Herr","Daniel Ohl de Mello","Pascal Debus","Maximilian Wendlinger","Kilian Tscharke","Juris Ulmanis","Alexander Erhard","Arthur Schmidt","Fabian Petsch"],"reviews":0,"subject":"quant-ph","summary":"We demonstrate an end-to-end, multi-stage attack against a quantum neural network (QNN) model that is executed on a trapped-ion quantum computer. Our chain combines side-channel reconnaissance, crosstalk characterization, adversarial example generation, and a physical crosstalk attack that realizes the adversarial perturbation on the device. We cover the full attack chain on ion traps and report the corresponding superconducting-hardware experiments in the appendix. We discuss implications for QaaS providers and hardware mitigations.","category":"research","comments":0,"disputed":false,"division":"physics","mentions":0,"discussed":0,"published":"2026-07-03","reactions":{}}