LOL, my timeline was flooded with this guy's shock. Someone just bypassed the safety guardrails of Qwen3.8-27B. OrcaRouter had previously released a Qwen3.8-27B-Uncensored-FP8 on Hugging Face. They used Abliteration…

X AI KOLs Timeline Models

Summary

By using Abliteration to modify the weights, someone published an uncensored version of Qwen3.8-27B, drastically lowering the refusal rate and preserving model performance, which has sparked debates on AI safety.

LOL, my timeline was full of this guy's surprise. Someone directly removed the safety guardrails of Qwen3.8-27B. OrcaRouter had previously released a Qwen3.8-27B-Uncensored-FP8 on Hugging Face. They used Abliteration to find the directions related to "refusal to answer" within the model, then directly modified the weights, altering a total of 131 residual-writing matrices. After the modification, the effect was extremely dramatic. The original Qwen3.8-27B had a refusal rate of about 64% to 99% in high-risk tests like AdvBench, JailbreakBench, and HarmBench. This uncensored version had its refusal rate reduced directly to 0% to 6%. With Thinking enabled, most test sets even showed a 0% refusal rate. Even more remarkably, the model's capabilities barely dropped: MMLU: 84.3 → 84.7 MMLU-Pro: 77.6 → 76.8 GSM8K: 90.0 → 88.7 CMMLU: 81.4 → 80.8 Visual, Reasoning, Tool Calling, and 262K Context were also preserved. And this is the FP8 version, with the full weights only about 31GB. The protagonist of this issue, @doodlestein, subsequently conducted a real test with it. He directly asked some extremely high-risk questions, and the model hardly refused, continuing to provide very specific operational information, even answering questions related to procurement and evading detection. Jeffrey's first reaction after seeing this was: "Download these weights to a USB drive immediately, before they're declared illegal and banned." Then he added: "Wait for this thing to be globally banned by law, 3... 2... 1..." This has thoroughly exposed the most awkward aspect of open-source model safety. The refusal mechanisms that manufacturers painstakingly installed in the models, once the weights are public, the community has already started researching how to remove them directly at the parameter level. And once a 31GB weights file starts circulating on the internet, deleting the Hugging Face page later becomes very limited in meaning.
Original Article
View Cached Full Text

Cached at: 08/22/26, 09:23 AM

Hilarious, my timeline was just flooded with this guy’s reactions.

Someone outright removed the safety guardrails of Qwen3.8-27B.

OrcaRouter previously released a Qwen3.8-27B-Uncensored-FP8 on Hugging Face.

They used Abliteration to identify the model’s internal directions related to “refusal to answer,” then directly modified the weights—altering 131 residual-writing matrices in total.

The results after the modification were staggering.

The original Qwen3.8-27B still had a refusal rate of approximately 64%–99% in high-risk benchmarks like AdvBench, JailbreakBench, and HarmBench.

This uncensored version slashed the refusal rate down to 0%–6%.

With Thinking enabled, most test sets even dropped to 0% refusal.

What’s even more remarkable is that the model’s capabilities barely declined:

MMLU: 84.3 → 84.7
MMLU-Pro: 77.6 → 76.8
GSM8K: 90.0 → 88.7
CMMLU: 81.4 → 80.8

Vision, Reasoning, Tool Calling, and 262K Context were all retained.

Moreover, this is an FP8 version, with the full weights weighing in at only about 31GB.

The protagonist of this episode, @doodlestein, then conducted real-world tests.

He asked some extremely high-risk questions, and the model barely refused—continuing to provide very detailed operational information, even answering queries related to procurement and evading detection.

Jeffrey’s first reaction after reviewing it was:

“Hurry up and download these weights to a USB drive before they’re declared illegal and banned.”

Then he added:

“Waiting for this to be legally banned worldwide in 3… 2… 1…”

This starkly exposes the most awkward aspect of open-source model safety.

Vendors painstakingly install refusal mechanisms in models, but once the weights are public, the community has already started figuring out how to strip them away at the parameter level.

And once a 31GB weight file begins circulating on the internet, deleting the Hugging Face page becomes largely meaningless.

Jeffrey Emanuel (@doodlestein):
Oh boy… waiting for this to be banned legally everywhere in 3… 2… 1….

Similar Articles

orcarouter/Qwen3.8-27B-Uncensored-FP8

Hugging Face Models Trending

A modified version of Qwen3.8-27B with safety refusal removed and FP8 quantization, designed for research in AI safety and interpretability.