J. Chen, “Adversarial Attack on Black-Box Multi-Agent by Adaptive Perturbation”, AAAI, vol. 40, no. 35, pp. 29359–29367, Mar. 2026.