Investigating Data Contamination for Pre-training Language Models
Not on the map. Why?
Abstract (arXiv)
Language models pre-trained on web-scale corpora demonstrate impressive capabilities on diverse downstream tasks. However, there is increasing concern whether such capabilities might arise from evaluation datasets being included in the pre-training corpus -- a phenomenon known as textitdata contamination -- in a manner that artificially increases performance. There has been little understanding of how this potential contamination might influence LMs' performance on downstream tasks. In this paper, we explore the impact of data contamination at the pre-training stage by pre-training a series of GPT-2 models textitfrom scratch. We highlight the effect of both text contamination (textiti.e. input text of the evaluation samples) and ground-truth contamination (textiti.e. the prompts asked on the input and the desired outputs) from evaluation data. We also investigate the effects of repeating contamination for various downstream tasks. Additionally, we examine the prevailing n-gram-based definitions of contamination within current LLM reports, pinpointing their limitations and inadequacy. Our findings offer new insights into data contamination's effects on language model capabilities and underscore the need for independent, comprehensive contamination assessments in LLM studies.
Key facts. Cited by 91 papers in the map (data through 7 Oct 2026). Builds on 21 of its 27 references that are in the map. First posted on arXiv 11 Jan 2024.
Builds on
21 of 27 references.
References · 21
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2020Measuring Massive Multitask Language Understandingcited by 7,768
- 2016SQuAD: 100,000+ Questions for Machine Comprehension of Textcited by 4,115
- 2020The Pile: An 800GB Dataset of Diverse Text for Language Modelingcited by 2,346
- 2020Extracting Training Data from Large Language Modelscited by 2,144
- 2016Abstractive Text Summarization Using Sequence-to-Sequence RNNs and Beyondcited by 809
- 2019Does Learning Require Memorization? A Short Tale about a Long Tailcited by 452
- 2023Scalable Extraction of Training Data from (Production) Language Modelscited by 415
- 2023How Far Can Camels Go? Exploring the State of Instruction Tuning on Open Resourcescited by 405
- 2023Detecting Pretraining Data from Large Language Modelscited by 375
- 2022Towards a Unified Multi-Dimensional Evaluator for Text Generationcited by 264
9 more
- 2023Membership Inference Attacks against Language Models via Neighbourhood Comparisoncited by 249
- 2023Pretraining Language Models with Human Preferencescited by 245
- 2023Proving Test Set Contamination in Black Box Language Modelscited by 227
- 2023Rethinking Benchmark and Contamination for Language Models with Rephrased Samplescited by 192
- 2023Time Travel in LLMs: Tracing Data Contamination in Large Language Modelscited by 175
- 2022Quantifying Privacy Risks of Masked Language Models Using Membership Inference Attackscited by 168
- 2022Preventing Verbatim Memorization in Language Models Gives a False Sense of Privacycited by 97
- 2021Membership Inference Attack Susceptibility of Clinical Language Modelscited by 50
- 2021Membership Inference on Word Embedding and Beyondcited by 34
Built on by
Citing papers per year: 2024: 44; 2025: 30; 2026: 17.
91 papers.
Sort:
By area:
- 2025SFT Memorizes, RL Generalizes: A Comparative Study of Foundation Model Post-trainingcited by 655
- 2025Preference Leakage: A Contamination Problem in LLM-as-a-judgecited by 119
- 2024BetterBench: Assessing AI Benchmarks, Uncovering Issues, and Establishing Best Practicescited by 112
- 2024ForecastBench: A Dynamic Benchmark of AI Forecasting Capabilitiescited by 104
- 2024Benchmarking Benchmark Leakage in Large Language Modelscited by 102
- 2024Generalization v.s. Memorization: Tracing Language Models' Capabilities Back to Pretraining Datacited by 83
- 2024Follow My Instruction and Spill the Beans: Scalable Data Extraction from Retrieval-Augmented Generation Systemscited by 76
- 2024Instructional Fingerprinting of Large Language Modelscited by 64
- 2024Quantifying Contamination in Evaluating Code Generation Capabilities of Language Modelscited by 62
- 2024AntiLeakBench: Preventing Data Contamination by Automatically Constructing Benchmarks with Updated Real-World Knowledgecited by 42
- 2025How Do Large Language Monkeys Get Their Power (Laws)?cited by 40
- 2024If in a Crowdsourced Data Annotation Pipeline, a GPT-4cited by 38
38 more
- 2025Real-TabPFN: Improving Tabular Foundation Models via Continued Pre-training With Real-World Datacited by 36
- 2024Elephants Never Forget: Memorization and Learning of Tabular Data in Large Language Modelscited by 34
- 2024ConStat: Performance-Based Contamination Detection in Large Language Modelscited by 33
- 2025A Survey on Data Contamination for Large Language Modelscited by 33
- 2024Unveiling the Spectrum of Data Contamination in Language Models: A Survey from Detection to Remediationcited by 30
- 2024Evaluation data contamination in LLMs: how do we measure it and (when) does it matter?cited by 30
- 2024VarBench: Robust Language Model Benchmarking Through Dynamic Variable Perturbationcited by 29
- 2024Unleashing the Power of Data Tsunami: A Comprehensive Survey on Data Assessment and Selection for Instruction Tuning of Language Modelscited by 29
- 2024Data Contamination Can Cross Language Barrierscited by 26
- 2024DARG: Dynamic Evaluation of Large Language Models via Adaptive Reasoning Graphcited by 26
- 2024Investigating the Impact of Data Contamination of Large Language Models in Text-to-SQL Translationcited by 21
- 2024Improving Model Evaluation using SMART Filtering of Benchmark Datasetscited by 20
- 2025Language Models May Verbatim Complete Text They Were Not Explicitly Trained Oncited by 20
- 2024Inference-Time Decontamination: Reusing Leaked Benchmarks for Large Language Model Evaluationcited by 18
- 2024Language model developers should report train-test overlapcited by 16
- 2024On Catastrophic Inheritance of Large Foundation Modelscited by 15
- 2024TabEBM: A Tabular Data Augmentation Method with Distinct Class-Specific Energy-Based Modelscited by 15
- 2024How Much Can We Forget about Data Contamination?cited by 14
- 2024Benchmark Inflation: Revealing LLM Performance Gaps Using Retro-Holdoutscited by 13
- 2025UGMathBench: A Diverse and Dynamic Benchmark for Undergraduate-Level Mathematical Reasoning with Large Language Modelscited by 13
- 2024Unearthing Large Scale Domain-Specific Knowledge from Public Corporacited by 12
- 2024A Comprehensive Survey of Contamination Detection Methods in Large Language Modelscited by 12
- 2024DnA-Eval: Enhancing Large Language Model Evaluation through Decomposition and Aggregationcited by 12
- 2024LLM-as-an-Interviewer: Beyond Static Testing Through Dynamic LLM Evaluationcited by 12
- 2024A Taxonomy for Data Contamination in Large Language Modelscited by 11
- 2024Language Models Trained to do Arithmetic Predict Human Risky and Intertemporal Choicecited by 10
- 2025DCR: Quantifying Data Contamination in LLMs Evaluationcited by 10
- 2024The Mosaic Memory of Large Language Modelscited by 9
- 2024StructEval: Deepen and Broaden Large Language Model Assessment via Structured Evaluationcited by 9
- 2024On Fairness of Low-Rank Adaptation of Large Modelscited by 8
- 2024Focused Large Language Models are Stable Many-Shot Learnerscited by 8
- 2025Information-Guided Identification of Training Data Imprint in (Proprietary) Large Language Modelscited by 8
- 2025NetArena: Dynamic Benchmarks for AI Agents in Network Automationcited by 8
- 2026Soft Contamination Means Benchmarks Test Shallow Generalizationcited by 8
- 2024LMD3: Language Model Data Density Dependencecited by 7
- 2024BA-LoRA: Bias-Alleviating Low-Rank Adaptation to Mitigate Catastrophic Inheritance in Large Language Modelscited by 7
- 2025LLMs as Span Annotators: A Comparative Study of LLMs and Humanscited by 7
- 2024Estimating Privacy Leakage of Augmented Contextual Knowledge in Language Modelscited by 6
50 most cited of 91 All 91 (JSON)
- 2026Large Language Models for Automated Cross-Domain Machine Learning Task Type Identification: A Benchmark Dataset and Evaluation28 Sep 2026
- 2026From Specialization to Generalization: Instruction-tuned LLMs for Robust Harmful Content Mitigation26 Aug 2026
- 2026Temporal Leakage in LLM Backtesting: Measurement, Validation, and Adjusted Scores4 Aug 2026
- 2026DataComp-VLM: Improved Open Datasets for Vision-Language Models26 Jun 2026
- 2026Can AI Refute Economic Theory? Evidence from Beyond the Knowledge Cutoff3 Jun 2026
- 2026TSFMAudit: Data Contamination Auditing in Forecasting Time Series Foundation Models24 May 2026
- 2026Correcting test set contamination by spiking the training data24 May 2026
- 2026How Hard is it to Rig a Benchmark? A Social Choice Analysis of Leaderboard Robustness22 May 2026
- 2026LLM Benchmark Datasets Should Be Contamination-Resistant19 May 2026
- 2026Dataset Watermarking with Provable Black-Box Detection7 May 2026
- 2026Leaderboard Incentives: Model Rankings under Strategic Post-Training9 Mar 2026
- 2026Soft Contamination Means Benchmarks Test Shallow Generalization12 Feb 2026
38 more
- 2026Reward Modeling for Reinforcement Learning-Based LLM Reasoning: Design, Challenges, and Evaluation10 Feb 2026
- 2026When Flores Bloomz Wrong: Cross-Direction Contamination in Machine Translation Evaluation28 Jan 2026
- 2026Stop Taking Tokenizers for Granted: They Are Core Design Decisions in Large Language Models19 Jan 2026
- 2026Quantifying the Effect of Test Set Contamination on Generative Evaluations7 Jan 2026
- 2026The Impact of Post-training on Data Contamination3 Jan 2026
- 2025IndiMathBench: Autoformalizing Mathematical Reasoning Problems with a Human Touch30 Nov 2025
- 2025CoreEval: Automatically Building Contamination-Resilient Datasets with Real-World Knowledge toward Reliable LLM Evaluation24 Nov 2025
- 2025Community-Aligned Behavior Under Uncertainty: Evidence of Epistemic Stance Transfer in LLMs14 Nov 2025
- 2025Data-Centric Lessons To Improve Speech-Language Pretraining22 Oct 2025
- 2025Inflated Excellence or True Performance? Rethinking Medical Diagnostic Benchmarks with Dynamic Evaluation10 Oct 2025
- 2025ArenaBencher: Automatic Benchmark Evolution via Multi-Model Competitive Evaluation9 Oct 2025
- 2025COLE: a Comprehensive Benchmark for French Language Understanding Evaluation6 Oct 2025
- 2025Paired by the Teacher: Turning Unpaired Data into High-Fidelity Pairs for Low-Resource Text Generation29 Sep 2025
- 2025Evaluating the Robustness of Chinchilla Compute-Optimal Scaling28 Sep 2025
- 2025EvolMathEval: Towards Evolvable Benchmarks for Mathematical Reasoning via Evolutionary Testing18 Aug 2025
- 2025How Much Do Large Language Model Cheat on Evaluation? Benchmarking Overestimation under the One-Time-Pad-Based Framework25 Jul 2025
- 2025Are AI Coders Snitches? An Empirical Study of Pretraining Data Detection on Code Large Language Models23 Jul 2025
- 2025DCR: Quantifying Data Contamination in LLMs Evaluation15 Jul 2025
- 2025Real-TabPFN: Improving Tabular Foundation Models via Continued Pre-training With Real-World Data5 Jul 2025
- 2025Can Vision Language Models Understand Mimed Actions?17 Jun 2025
- 2025NetArena: Dynamic Benchmarks for AI Agents in Network Automation3 Jun 2025
- 2025CapBencher: Give Your LLM Benchmark a Built-in Alarm for Test-Set Overfitting23 May 2025
- 2025LLMs as Span Annotators: A Comparative Study of LLMs and Humans11 Apr 2025
- 2025Style over Substance: Distilled Language Models Reason Via Stylistic Replication2 Apr 2025
- 2025Language Models May Verbatim Complete Text They Were Not Explicitly Trained On21 Mar 2025
- 2025Information-Guided Identification of Training Data Imprint in (Proprietary) Large Language Models15 Mar 2025
- 2025Position: Ensuring mutual privacy is necessary for effective external evaluation of proprietary AI systems3 Mar 2025
- 2025Correlating and Predicting Human Evaluations of Language Models from Natural Language Processing Benchmarks24 Feb 2025
- 2025How Do Large Language Monkeys Get Their Power (Laws)?24 Feb 2025
- 2025Detecting Benchmark Contamination Through Watermarking24 Feb 2025
- 2025A Survey on Data Contamination for Large Language Models20 Feb 2025
- 2025Preference Leakage: A Contamination Problem in LLM-as-a-judge3 Feb 2025
- 2025SFT Memorizes, RL Generalizes: A Comparative Study of Foundation Model Post-training28 Jan 2025
- 2025AdEval: Alignment-based Dynamic Evaluation to Mitigate Data Contamination in Large Language Models23 Jan 2025
- 2025UGMathBench: A Diverse and Dynamic Benchmark for Undergraduate-Level Mathematical Reasoning with Large Language Models23 Jan 2025
- 2024AntiLeakBench: Preventing Data Contamination by Automatically Constructing Benchmarks with Updated Real-World Knowledge18 Dec 2024
- 2024LLM-as-an-Interviewer: Beyond Static Testing Through Dynamic LLM Evaluation10 Dec 2024
- 2024BetterBench: Assessing AI Benchmarks, Uncovering Issues, and Establishing Best Practices20 Nov 2024
50 newest of 91 All 91 (JSON)
- 2024DARG: Dynamic Evaluation of Large Language Models via Adaptive Reasoning Graphcited by 26
- 2025UGMathBench: A Diverse and Dynamic Benchmark for Undergraduate-Level Mathematical Reasoning with Large Language Modelscited by 13
- 2024Rethinking the Uncertainty: A Critical Review and Analysis in the Era of Large Language Modelscited by 6
- 2025Style over Substance: Distilled Language Models Reason Via Stylistic Replicationcited by 5
- 2025Inflated Excellence or True Performance? Rethinking Medical Diagnostic Benchmarks with Dynamic Evaluationcited by 5
- 2026Reward Modeling for Reinforcement Learning-Based LLM Reasoning: Design, Challenges, and Evaluationcited by 5
- 2026The Impact of Post-training on Data Contaminationcited by 4
- 2025EvolMathEval: Towards Evolvable Benchmarks for Mathematical Reasoning via Evolutionary Testingcited by 3
- 2025IndiMathBench: Autoformalizing Mathematical Reasoning Problems with a Human Touchcited by 3
- 2026Reward Modeling for Reinforcement Learning-Based LLM Reasoning: Design, Challenges, and Evaluation10 Feb 2026
- 2026The Impact of Post-training on Data Contamination3 Jan 2026
- 2025IndiMathBench: Autoformalizing Mathematical Reasoning Problems with a Human Touch30 Nov 2025
- 2025Inflated Excellence or True Performance? Rethinking Medical Diagnostic Benchmarks with Dynamic Evaluation10 Oct 2025
- 2025EvolMathEval: Towards Evolvable Benchmarks for Mathematical Reasoning via Evolutionary Testing18 Aug 2025
- 2025Style over Substance: Distilled Language Models Reason Via Stylistic Replication2 Apr 2025
- 2025UGMathBench: A Diverse and Dynamic Benchmark for Undergraduate-Level Mathematical Reasoning with Large Language Models23 Jan 2025
- 2024Rethinking the Uncertainty: A Critical Review and Analysis in the Era of Large Language Models26 Oct 2024
- 2024DARG: Dynamic Evaluation of Large Language Models via Adaptive Reasoning Graph25 Jun 2024
- 2026DataComp-VLM: Improved Open Datasets for Vision-Language Models26 Jun 2026
- 2025Can Vision Language Models Understand Mimed Actions?17 Jun 2025
- 2025SFT Memorizes, RL Generalizes: A Comparative Study of Foundation Model Post-trainingcited by 655
- 2025Preference Leakage: A Contamination Problem in LLM-as-a-judgecited by 119
- 2024BetterBench: Assessing AI Benchmarks, Uncovering Issues, and Establishing Best Practicescited by 112
- 2024ForecastBench: A Dynamic Benchmark of AI Forecasting Capabilitiescited by 104
- 2024Benchmarking Benchmark Leakage in Large Language Modelscited by 102
- 2024Generalization v.s. Memorization: Tracing Language Models' Capabilities Back to Pretraining Datacited by 83
- 2024Instructional Fingerprinting of Large Language Modelscited by 64
- 2024Quantifying Contamination in Evaluating Code Generation Capabilities of Language Modelscited by 62
- 2024AntiLeakBench: Preventing Data Contamination by Automatically Constructing Benchmarks with Updated Real-World Knowledgecited by 42
- 2024If in a Crowdsourced Data Annotation Pipeline, a GPT-4cited by 38
- 2025Real-TabPFN: Improving Tabular Foundation Models via Continued Pre-training With Real-World Datacited by 36
- 2024Elephants Never Forget: Memorization and Learning of Tabular Data in Large Language Modelscited by 34
12 most cited of 76 All 76 (JSON)
- 2026Large Language Models for Automated Cross-Domain Machine Learning Task Type Identification: A Benchmark Dataset and Evaluation28 Sep 2026
- 2026Temporal Leakage in LLM Backtesting: Measurement, Validation, and Adjusted Scores4 Aug 2026
- 2026Can AI Refute Economic Theory? Evidence from Beyond the Knowledge Cutoff3 Jun 2026
- 2026TSFMAudit: Data Contamination Auditing in Forecasting Time Series Foundation Models24 May 2026
- 2026Correcting test set contamination by spiking the training data24 May 2026
- 2026How Hard is it to Rig a Benchmark? A Social Choice Analysis of Leaderboard Robustness22 May 2026
- 2026LLM Benchmark Datasets Should Be Contamination-Resistant19 May 2026
- 2026Dataset Watermarking with Provable Black-Box Detection7 May 2026
- 2026Leaderboard Incentives: Model Rankings under Strategic Post-Training9 Mar 2026
- 2026Soft Contamination Means Benchmarks Test Shallow Generalization12 Feb 2026
- 2026When Flores Bloomz Wrong: Cross-Direction Contamination in Machine Translation Evaluation28 Jan 2026
- 2026Stop Taking Tokenizers for Granted: They Are Core Design Decisions in Large Language Models19 Jan 2026
12 newest of 76 All 76 (JSON)