Investigating Data Contamination in Modern Benchmarks for Large Language Models
Not on the map. Why?
Cited by 23 in LLM reasoning, but placed by its own abstract, which didn’t fit.
Abstract (arXiv)
Recent observations have underscored a disparity between the inflated benchmark scores and the actual performance of LLMs, raising concerns about potential contamination of evaluation benchmarks. This issue is especially critical for closed-source models and certain open-source models where training data transparency is lacking. In this paper we study data contamination by proposing two methods tailored for both open-source and proprietary LLMs. We first introduce a retrieval-based system to explore potential overlaps between evaluation benchmarks and pretraining corpora. We further present a novel investigation protocol named Testset Slot Guessing (textitTS-Guessing), applicable to both open and proprietary models. This approach entails masking a wrong answer in a multiple-choice question and prompting the model to fill in the gap. Additionally, it involves obscuring an unlikely word in an evaluation example and asking the model to produce it. We find that certain commercial LLMs could surprisingly guess the missing option in various test sets. Specifically, in the TruthfulQA benchmark, we find that LLMs exhibit notable performance improvement when provided with additional metadata in the benchmark. Further, in the MMLU benchmark, ChatGPT and GPT-4 demonstrated an exact match rate of 52% and 57%, respectively, in guessing the missing options in benchmark test data. We hope these results underscore the need for more robust evaluation methodologies and benchmarks in the field.
Key facts. Cited by 136 papers in the map (data through 7 Oct 2026). Builds on 33 of its 46 references that are in the map. First posted on arXiv 16 Nov 2023.
Builds on
33 of 46 references.
References · 33
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2022Training language models to follow instructions with human feedbackcited by 15,712
- 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,491
- 2021Training Verifiers to Solve Math Word Problemscited by 9,743
- 2020Measuring Massive Multitask Language Understandingcited by 7,768
- 2022PaLM: Scaling Language Modeling with Pathwayscited by 5,304
- 2019HellaSwag: Can a Machine Really Finish Your Sentence?cited by 4,018
- 2021Finetuned Language Models Are Zero-Shot Learnerscited by 3,747
- 2022OPT: Open Pre-trained Transformer Language Modelscited by 3,464
- 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,919
- 2019PIQA: Reasoning about Physical Commonsense in Natural Languagecited by 2,818
- 2020The Pile: An 800GB Dataset of Diverse Text for Language Modelingcited by 2,346
21 more
- 2018Can a Suit of Armor Conduct Electricity? A New Dataset for Open Book Question Answeringcited by 2,114
- 2018A Call for Clarity in Reporting BLEU Scorescited by 1,790
- 2023Pythia: A Suite for Analyzing Large Language Models Across Training and Scalingcited by 1,734
- 2020BLEURT: Learning Robust Metrics for Text Generationcited by 1,196
- 2022GPT-NeoX-20B: An Open-Source Autoregressive Language Modelcited by 711
- 2021Documenting Large Webtext Corpora: A Case Study on the Colossal Clean Crawled Corpuscited by 481
- 2023NLP Evaluation in trouble: On the Need to Measure LLM Data Contamination for each Benchmarkcited by 339
- 2023Proving Test Set Contamination in Black Box Language Modelscited by 227
- 2023Don't Make Your LLM an Evaluation Benchmark Cheatercited by 194
- 2023Stop Uploading Test Data in Plain Text: Practical Strategies for Mitigating Data Contamination by Evaluation Benchmarkscited by 139
- 2023Skywork: A More Open Bilingual Foundation Modelcited by 110
- 2022Language Contamination Helps Explain the Cross-lingual Capabilities of English Pretrained Modelscited by 90
- 2023Can we trust the evaluation on ChatGPT?cited by 63
- 2022Understanding Transformer Memorization Recall Through Idiomscited by 62
- 2021Pyserini: An Easy-to-Use Python Toolkit to Support Replicable IR Research with Sparse and Dense Representationscited by 60
- 2023Data Contamination Through the Lens of Timecited by 39
- 2023Pretraining on the Test Set Is All You Needcited by 33
- 2023The ROOTS Search Tool: Data Transparency for LLMscited by 30
- 2022FALCON: Fast Visual Concept Learning by Integrating Images, Linguistic descriptions, and Conceptual Relationscited by 20
- 2022MPT: Mesh Pre-Training with Transformers for Human Pose and Mesh Reconstructioncited by 11
- 2023GAIA Search: Hugging Face and Pyserini Interoperability for NLP Training Data Explorationcited by 8
Built on by
Citing papers per year: 2024: 28; 2025: 53; 2026: 55.
136 papers.
Sort:
By area:
- 2025SWE-Bench Pro: Can AI Agents Solve Long-Horizon Software Engineering Tasks?cited by 254
- 2024LiveBench: A Challenging, Contamination-Limited LLM Benchmarkcited by 242
- 2024FrontierMath: A Benchmark for Evaluating Advanced Mathematical Reasoning in AIcited by 227
- 2024Hallucination-Free? Assessing the Reliability of Leading AI Legal Research Toolscited by 170
- 2024Black-Box Access is Insufficient for Rigorous AI Auditscited by 123
- 2025Preference Leakage: A Contamination Problem in LLM-as-a-judgecited by 119
- 2024Benchmarking Benchmark Leakage in Large Language Modelscited by 102
- 2025HalluLens: LLM Hallucination Benchmarkcited by 88
- 2026MIRAGE: The Illusion of Visual Understandingcited by 57
- 2024SoK: Membership Inference Attacks on LLMs are Rushing Nowhere (and How to Fix It)cited by 54
- 2025Understand, Solve and Translate: Bridging the Multilingual Mathematical Reasoning Gapcited by 41
- 2025Neither Valid nor Reliable? Investigating the Use of LLMs as Judgescited by 37
38 more
- 2025LLM-as-a-Prophet: Understanding Predictive Intelligence with Prophet Arenacited by 36
- 2024ConStat: Performance-Based Contamination Detection in Large Language Modelscited by 33
- 2024Evading Data Contamination Detection for Language Models is (too) Easycited by 30
- 2026LongCLI-Bench: A Preliminary Benchmark and Study for Long-horizon Agentic Programming in Command-Line Interfacescited by 29
- 2026When AI Benchmarks Plateau: A Systematic Study of Benchmark Saturationcited by 29
- 2024DARG: Dynamic Evaluation of Large Language Models via Adaptive Reasoning Graphcited by 26
- 2024Does Data Contamination Detection Work (Well) for LLMs? A Survey and Evaluation on Detection Assumptionscited by 26
- 2024TRUCE: Private Benchmarking to Prevent Contamination and Improve Comparative Evaluation of LLMscited by 24
- 2025Llama-3.1-FoundationAI-SecurityLLM-8B-Instruct Technical Reportcited by 21
- 2024PhyloLM : Inferring the Phylogeny of Large Language Models and Predicting their Performances in Benchmarkscited by 18
- 2024Holistic Safety and Responsibility Evaluations of Advanced AI Modelscited by 18
- 2024Eureka: Evaluating and Understanding Large Foundation Modelscited by 18
- 2025LLM-Safety Evaluations Lack Robustnesscited by 16
- 2025Probing the Critical Point (CritPt) of AI Reasoning: a Frontier Physics Research Benchmarkcited by 16
- 2024On Catastrophic Inheritance of Large Foundation Modelscited by 15
- 2024TabEBM: A Tabular Data Augmentation Method with Distinct Class-Specific Energy-Based Modelscited by 15
- 2025MedArabiQ: Benchmarking Large Language Models on Arabic Medical Taskscited by 15
- 2024How Much Can We Forget about Data Contamination?cited by 14
- 2024Benchmark Inflation: Revealing LLM Performance Gaps Using Retro-Holdoutscited by 13
- 2025UGMathBench: A Diverse and Dynamic Benchmark for Undergraduate-Level Mathematical Reasoning with Large Language Modelscited by 13
- 2025The Emperor's New Clothes in Benchmarking? A Rigorous Examination of Mitigation Strategies for LLM Benchmark Data Contaminationcited by 13
- 2024A Comprehensive Survey of Contamination Detection Methods in Large Language Modelscited by 12
- 2024MathGAP: Out-of-Distribution Evaluation on Problems with Arbitrarily Complex Proofscited by 12
- 2025The Automated LLM Speedrunning Benchmark: Reproducing NanoGPT Improvementscited by 12
- 2024PingPong: A Benchmark for Role-Playing Language Models with User Emulation and Multi-Model Evaluationcited by 10
- 2025EngiBench: A Benchmark for Evaluating Large Language Models on Engineering Problem Solvingcited by 10
- 2024The Mosaic Memory of Large Language Modelscited by 9
- 2024Both Text and Images Leaked! A Systematic Analysis of Data Contamination in Multimodal LLMcited by 9
- 2025A Desideratum for Conversational Agents: Capabilities, Challenges, and Future Directionscited by 9
- 2026SWE-Router: Routing in Multi-turn Agentic Software Engineering Taskscited by 9
- 2025NetArena: Dynamic Benchmarks for AI Agents in Network Automationcited by 8
- 2025A Comment On "The Illusion of Thinking": Reframing the Reasoning Cliff as an Agentic Gapcited by 8
- 2025On The Fragility of Benchmark Contamination Detection in Reasoning Modelscited by 8
- 2024Mind the Data Gap: Bridging LLMs to Enterprise Data Integrationcited by 7
- 2025STEER-ME: Assessing the Microeconomic Reasoning of Large Language Modelscited by 7
- 2025Confidence in Large Language Model Evaluation: A Bayesian Approach to Limited-Sample Challengescited by 7
- 2025Federated In-Context Learning: Iterative Refinement for Improved Answer Qualitycited by 7
- 2025Pretraining on the Test Set Is No Longer All You Need: A Debate-Driven Approach to QA Benchmarkscited by 7
50 most cited of 136 All 136 (JSON)
- 2026MAADBench: The Refreshable Paradigm for Anomaly Detection in Multi-Agent Systems29 Sep 2026
- 2026Uncheatable Eval: Dynamic Compression-Based Evaluation of Language Models23 Sep 2026
- 2026LeakScale: Estimating the Causal Effect of Benchmark Exposure23 Sep 2026
- 2026SSP-Bench: A Hybrid Data Generation Framework for Safety, Security, and Privacy Evaluation21 Sep 2026
- 2026Rethinking Domain Specialization for Open-Ended Scientific Reasoning in Astronomy Language Models15 Sep 2026
- 2026ORDER: A Fictitious-World Benchmark for Domain-Adaptive Embodied AI13 Sep 2026
- 2026Judging by the Cover: Cleaning LLM Truthfulness Benchmarks to Avoid Surface-Level Feature Leakage11 Sep 2026
- 2026Molecular D'ej`a Vu: Digit-Level Retrieval of Molecular Properties in Frontier Language Models4 Sep 2026
- 2026Benchmark Contamination: A Taxonomy Organized by Defeated Mitigation29 Aug 2026
- 2026LittleLearner: Language Models Under Pedagogically Controlled Knowledge Exposure13 Aug 2026
- 2026AI Evaluation Should Measure Verification Cost, Not Correctness Alone9 Aug 2026
- 2026Can Open-Weight Models Compete on Financial Text Comprehension?9 Aug 2026
38 more
- 2026Relay-Bench: Evaluating LLMs on Multi-Domain Reasoning Chains20 Jul 2026
- 2026Copy-on-Write Scoring: Application-Specific Agent Evaluations15 Jul 2026
- 2026CHSR-RRF: A curriculum-gated hybrid retrieval framework with reciprocal rank fusion and leakage-aware benchmarking for educational RAG14 Jul 2026
- 2026Auditing Data Leakage in Whole-Slide Image Multimodal Benchmarks14 Jul 2026
- 2026SWE-Router: Routing in Multi-turn Agentic Software Engineering Tasks30 Jun 2026
- 2026Autonomous Research Agents: A Survey of AI Scientists and the Verification Gap29 Jun 2026
- 2026MMGist: A Comprehensive Multimodal Benchmark for 202721 Jun 2026
- 2026Frontier Coding Agents Use Metaprogramming to Adapt to Unfamiliar Programming Languages9 Jun 2026
- 2026The Reliability Gap in Benchmark Auditing: Distribution Shift and Scale as Failure Modes of Contamination Detection2 Jun 2026
- 2026LiveBrowseComp: Are Search Agents Searching, or Just Verifying What They Already Know?27 May 2026
- 2026Wisdom of LLM Crowds: Aggregation and Contamination in Language Model Ensembles26 May 2026
- 2026TRACER: A Semantic-Aware Framework for Fine-Grained Contamination Detection in Code LLMs22 May 2026
- 2026How Hard is it to Rig a Benchmark? A Social Choice Analysis of Leaderboard Robustness22 May 2026
- 2026Pretraining Data Exposure in Large Language Models: A Survey of Membership Inference, Data Contamination, and Security Implications21 May 2026
- 2026Provable Joint Decontamination for Benchmarking Multiple Large Language Models20 May 2026
- 2026LLM Benchmark Datasets Should Be Contamination-Resistant19 May 2026
- 2026Interactive Evaluation Requires a Design Science18 May 2026
- 2026Fully Open Meditron: An Auditable Pipeline for Clinical LLMs15 May 2026
- 2026XDomainBench: Diagnosing Reasoning Collapse in High-Dimensional Scientific Knowledge Composition14 May 2026
- 2026Unsteady Metrics and Benchmarking Cultures of AI Model Builders13 May 2026
- 2026LensVLM: Selective Context Expansion for Compressed Visual Representation of Text7 May 2026
- 2026IntentGrasp: A Comprehensive Benchmark for Intent Understanding7 May 2026
- 2026Is It Novel and Why? Fine-Grained Patent Novelty Prediction Based on Passage Retrieval4 May 2026
- 2026StressEval: Failure-Driven Dynamic Benchmarking for Knowledge-Intensive Reasoning in Large Language Models3 May 2026
- 2026ActuBench: A Multi-Agent LLM Pipeline for Generation and Evaluation of Actuarial Reasoning Tasks22 Apr 2026
- 2026CT Open: An Open-Access, Uncontaminated, Live Platform for the Open Challenge of Clinical Trial Outcome Prediction17 Apr 2026
- 2026CivBench: Progress-Based Evaluation for LLMs' Strategic Decision-Making in Civilization V9 Apr 2026
- 2026A Statistical Framework for Auditing Behavioral Dependence and Induced Bias in LLM Judges8 Apr 2026
- 2026Combating Data Laundering in LLM Training2 Apr 2026
- 2026MIRAGE: The Illusion of Visual Understanding23 Mar 2026
- 2026Are Large Language Models Truly Smarter Than Humans?17 Mar 2026
- 2026Multilingual Reasoning Gym: Multilingual Scaling of Procedural Reasoning Environments11 Mar 2026
- 2026EsoLang-Bench: Evaluating Genuine Reasoning in Large Language Models via Esoteric Programming Languages10 Mar 2026
- 2026How Much Do LLMs Hallucinate in Document Q&A Scenarios? A 172-Billion-Token Study Across Temperatures, Context Lengths, and Hardware Platforms9 Mar 2026
- 2026Pencil Puzzle Bench: A Benchmark for Multi-Step Verifiable Reasoning2 Mar 2026
- 2026When AI Benchmarks Plateau: A Systematic Study of Benchmark Saturation18 Feb 2026
- 2026LiveClin: A Live Clinical Benchmark without Leakage18 Feb 2026
- 2026LongCLI-Bench: A Preliminary Benchmark and Study for Long-horizon Agentic Programming in Command-Line Interfaces15 Feb 2026
50 newest of 136 All 136 (JSON)
- 2024FrontierMath: A Benchmark for Evaluating Advanced Mathematical Reasoning in AIcited by 227
- 2025Understand, Solve and Translate: Bridging the Multilingual Mathematical Reasoning Gapcited by 41
- 2024DARG: Dynamic Evaluation of Large Language Models via Adaptive Reasoning Graphcited by 26
- 2025Probing the Critical Point (CritPt) of AI Reasoning: a Frontier Physics Research Benchmarkcited by 16
- 2025UGMathBench: A Diverse and Dynamic Benchmark for Undergraduate-Level Mathematical Reasoning with Large Language Modelscited by 13
- 2025EngiBench: A Benchmark for Evaluating Large Language Models on Engineering Problem Solvingcited by 10
- 2025A Comment On "The Illusion of Thinking": Reframing the Reasoning Cliff as an Agentic Gapcited by 8
- 2025On The Fragility of Benchmark Contamination Detection in Reasoning Modelscited by 8
- 2025STEER-ME: Assessing the Microeconomic Reasoning of Large Language Modelscited by 7
- 2025FinMMR: Make Financial Numerical Reasoning More Multimodal, Comprehensive, and Challengingcited by 6
- 2026Pencil Puzzle Bench: A Benchmark for Multi-Step Verifiable Reasoningcited by 4
- 2026EsoLang-Bench: Evaluating Genuine Reasoning in Large Language Models via Esoteric Programming Languagescited by 4
12 most cited of 23 All 23 (JSON)
- 2026Rethinking Domain Specialization for Open-Ended Scientific Reasoning in Astronomy Language Models15 Sep 2026
- 2026Relay-Bench: Evaluating LLMs on Multi-Domain Reasoning Chains20 Jul 2026
- 2026XDomainBench: Diagnosing Reasoning Collapse in High-Dimensional Scientific Knowledge Composition14 May 2026
- 2026StressEval: Failure-Driven Dynamic Benchmarking for Knowledge-Intensive Reasoning in Large Language Models3 May 2026
- 2026ActuBench: A Multi-Agent LLM Pipeline for Generation and Evaluation of Actuarial Reasoning Tasks22 Apr 2026
- 2026EsoLang-Bench: Evaluating Genuine Reasoning in Large Language Models via Esoteric Programming Languages10 Mar 2026
- 2026Pencil Puzzle Bench: A Benchmark for Multi-Step Verifiable Reasoning2 Mar 2026
- 2025DynaSolidGeo: A Dynamic Benchmark for Genuine Spatial Mathematical Reasoning of VLMs in Solid Geometry25 Oct 2025
- 2025RADAR: Mechanistic Pathways for Detecting Data Contamination in LLM Evaluation10 Oct 2025
- 2025On The Fragility of Benchmark Contamination Detection in Reasoning Models30 Sep 2025
- 2025Probing the Critical Point (CritPt) of AI Reasoning: a Frontier Physics Research Benchmark30 Sep 2025
- 2025WirelessMathLM: Teaching Mathematical Reasoning for LLMs in Wireless Communications with Reinforcement Learning27 Sep 2025
12 newest of 23 All 23 (JSON)
- 2026LongCLI-Bench: A Preliminary Benchmark and Study for Long-horizon Agentic Programming in Command-Line Interfacescited by 29
- 2025A Desideratum for Conversational Agents: Capabilities, Challenges, and Future Directionscited by 9
- 2026SWE-Router: Routing in Multi-turn Agentic Software Engineering Taskscited by 9
- 2026Autonomous Research Agents: A Survey of AI Scientists and the Verification Gapcited by 6
- 2026LiveBrowseComp: Are Search Agents Searching, or Just Verifying What They Already Know?cited by 3
- 2026CivBench: Progress-Based Evaluation for LLMs' Strategic Decision-Making in Civilization Vcited by 2
- 2026Frontier Coding Agents Use Metaprogramming to Adapt to Unfamiliar Programming Languagescited by 1
- 2026Copy-on-Write Scoring: Application-Specific Agent Evaluationscited by 0
- 2026MAADBench: The Refreshable Paradigm for Anomaly Detection in Multi-Agent Systemscited by 0
- 2026MAADBench: The Refreshable Paradigm for Anomaly Detection in Multi-Agent Systems29 Sep 2026
- 2026Copy-on-Write Scoring: Application-Specific Agent Evaluations15 Jul 2026
- 2026SWE-Router: Routing in Multi-turn Agentic Software Engineering Tasks30 Jun 2026
- 2026Autonomous Research Agents: A Survey of AI Scientists and the Verification Gap29 Jun 2026
- 2026Frontier Coding Agents Use Metaprogramming to Adapt to Unfamiliar Programming Languages9 Jun 2026
- 2026LiveBrowseComp: Are Search Agents Searching, or Just Verifying What They Already Know?27 May 2026
- 2026CivBench: Progress-Based Evaluation for LLMs' Strategic Decision-Making in Civilization V9 Apr 2026
- 2026LongCLI-Bench: A Preliminary Benchmark and Study for Long-horizon Agentic Programming in Command-Line Interfaces15 Feb 2026
- 2025A Desideratum for Conversational Agents: Capabilities, Challenges, and Future Directions7 Apr 2025
- 2024Both Text and Images Leaked! A Systematic Analysis of Data Contamination in Multimodal LLMcited by 9
- 2025CNS-Obsidian: A Neurosurgical Vision-Language Model Built From Scientific Publicationscited by 3
- 2025MatQnA: A Benchmark Dataset for Multi-modal Large Language Models in Materials Characterization and Analysiscited by 3
- 2026LensVLM: Selective Context Expansion for Compressed Visual Representation of Textcited by 2
- 2026Auditing Data Leakage in Whole-Slide Image Multimodal Benchmarkscited by 1
- 2026Auditing Data Leakage in Whole-Slide Image Multimodal Benchmarks14 Jul 2026
- 2026LensVLM: Selective Context Expansion for Compressed Visual Representation of Text7 May 2026
- 2025MatQnA: A Benchmark Dataset for Multi-modal Large Language Models in Materials Characterization and Analysis14 Sep 2025
- 2025CNS-Obsidian: A Neurosurgical Vision-Language Model Built From Scientific Publications26 Feb 2025
- 2024Both Text and Images Leaked! A Systematic Analysis of Data Contamination in Multimodal LLM6 Nov 2024
- 2025LLM-Safety Evaluations Lack Robustnesscited by 16
- 2025LLM-Safety Evaluations Lack Robustness4 Mar 2025
- 2025SWE-Bench Pro: Can AI Agents Solve Long-Horizon Software Engineering Tasks?cited by 254
- 2024LiveBench: A Challenging, Contamination-Limited LLM Benchmarkcited by 242
- 2024Hallucination-Free? Assessing the Reliability of Leading AI Legal Research Toolscited by 170
- 2024Black-Box Access is Insufficient for Rigorous AI Auditscited by 123
- 2025Preference Leakage: A Contamination Problem in LLM-as-a-judgecited by 119
- 2024Benchmarking Benchmark Leakage in Large Language Modelscited by 102
- 2025HalluLens: LLM Hallucination Benchmarkcited by 88
- 2026MIRAGE: The Illusion of Visual Understandingcited by 57
- 2025Neither Valid nor Reliable? Investigating the Use of LLMs as Judgescited by 37
- 2025LLM-as-a-Prophet: Understanding Predictive Intelligence with Prophet Arenacited by 36
- 2024ConStat: Performance-Based Contamination Detection in Large Language Modelscited by 33
- 2024Evading Data Contamination Detection for Language Models is (too) Easycited by 30
12 most cited of 93 All 93 (JSON)
- 2026Uncheatable Eval: Dynamic Compression-Based Evaluation of Language Models23 Sep 2026
- 2026LeakScale: Estimating the Causal Effect of Benchmark Exposure23 Sep 2026
- 2026SSP-Bench: A Hybrid Data Generation Framework for Safety, Security, and Privacy Evaluation21 Sep 2026
- 2026ORDER: A Fictitious-World Benchmark for Domain-Adaptive Embodied AI13 Sep 2026
- 2026Judging by the Cover: Cleaning LLM Truthfulness Benchmarks to Avoid Surface-Level Feature Leakage11 Sep 2026
- 2026Molecular D'ej`a Vu: Digit-Level Retrieval of Molecular Properties in Frontier Language Models4 Sep 2026
- 2026Benchmark Contamination: A Taxonomy Organized by Defeated Mitigation29 Aug 2026
- 2026LittleLearner: Language Models Under Pedagogically Controlled Knowledge Exposure13 Aug 2026
- 2026AI Evaluation Should Measure Verification Cost, Not Correctness Alone9 Aug 2026
- 2026Can Open-Weight Models Compete on Financial Text Comprehension?9 Aug 2026
- 2026MMGist: A Comprehensive Multimodal Benchmark for 202721 Jun 2026
- 2026The Reliability Gap in Benchmark Auditing: Distribution Shift and Scale as Failure Modes of Contamination Detection2 Jun 2026
12 newest of 93 All 93 (JSON)