ConStat: Performance-Based Contamination Detection in Large Language Models
Not on the map. Why?
Abstract (arXiv)
Public benchmarks play an essential role in the evaluation of large language models. However, data contamination can lead to inflated performance, rendering them unreliable for model comparison. It is therefore crucial to detect contamination and estimate its impact on measured performance. Unfortunately, existing detection methods can be easily evaded and fail to quantify contamination. To overcome these limitations, we propose a novel definition of contamination as artificially inflated and non-generalizing benchmark performance instead of the inclusion of benchmark samples in the training data. This perspective enables us to detect any model with inflated performance, i.e., performance that does not generalize to rephrased samples, synthetic samples from the same distribution, or different benchmarks for the same task. Based on this insight, we develop ConStat, a statistical method that reliably detects and quantifies contamination by comparing performance between a primary and reference benchmark relative to a set of reference models. We demonstrate the effectiveness of ConStat in an extensive evaluation of diverse model architectures, benchmarks, and contamination scenarios and find high levels of contamination in multiple popular models including Mistral, Llama, Yi, and the top-3 Open LLM Leaderboard models.
Key facts. Cited by 33 papers in the map (data through 7 Oct 2026). Builds on 38 of its 53 references that are in the map. First posted on arXiv 25 May 2024.
Builds on
38 of 53 references.
References · 38
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2023GPT-4 Technical Reportcited by 18,132
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
- 2021Training Verifiers to Solve Math Word Problemscited by 9,743
- 2021Evaluating Large Language Models Trained on Codecited by 8,053
- 2020Measuring Massive Multitask Language Understandingcited by 7,768
- 2022PaLM: Scaling Language Modeling with Pathwayscited by 5,304
- 2018Think you have Solved Question Answering? Try ARC, the AI2 Reasoning Challengecited by 4,710
- 2019HellaSwag: Can a Machine Really Finish Your Sentence?cited by 4,018
- 2023Qwen Technical Reportcited by 3,273
- 2023SWE-bench: Can Language Models Resolve Real-World GitHub Issues?cited by 3,193
- 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,919
26 more
- 2020Extracting Training Data from Large Language Modelscited by 2,144
- 2024Phi-3 Technical Report: A Highly Capable Language Model Locally on Your Phonecited by 1,883
- 2016The LAMBADA dataset: Word prediction requiring a broad discourse contextcited by 960
- 2023TIES-Merging: Resolving Interference When Merging Modelscited by 795
- 2017Crowdsourcing Multiple Choice Science Questionscited by 742
- 2019MathQA: Towards Interpretable Math Word Problem Solving with Operation-Based Formalismscited by 653
- 2021Documenting Large Webtext Corpora: A Case Study on the Colossal Clean Crawled Corpuscited by 481
- 2023Detecting Pretraining Data from Large Language Modelscited by 375
- 2023NLP Evaluation in trouble: On the Need to Measure LLM Data Contamination for each Benchmarkcited by 339
- 2023Membership Inference Attacks against Language Models via Neighbourhood Comparisoncited by 249
- 2023Proving Test Set Contamination in Black Box Language Modelscited by 227
- 2023Don't Make Your LLM an Evaluation Benchmark Cheatercited by 194
- 2023Rethinking Benchmark and Contamination for Language Models with Rephrased Samplescited by 192
- 2024Arcee's MergeKit: A Toolkit for Merging Large Language Modelscited by 189
- 2024A Careful Examination of Large Language Model Performance on Grade School Arithmeticcited by 188
- 2023Time Travel in LLMs: Tracing Data Contamination in Large Language Modelscited by 175
- 2022Quantifying Privacy Risks of Masked Language Models Using Membership Inference Attackscited by 168
- 2023Investigating Data Contamination in Modern Benchmarks for Large Language Modelscited by 136
- 2024Benchmarking Benchmark Leakage in Large Language Modelscited by 102
- 2024Investigating Data Contamination for Pre-training Language Modelscited by 91
- 2024Stable LM 2 1.6B Technical Reportcited by 86
- 2023An Open Source Data Contamination Report for Large Language Modelscited by 47
- 2023Data Contamination Quiz: A Tool to Detect and Estimate Contamination in Large Language Modelscited by 46
- 2024Evading Data Contamination Detection for Language Models is (too) Easycited by 30
- 2023Koala: An Index for Quantifying Overlaps with Pre-training Corporacited by 19
- 2023CLEAN-EVAL: Clean Evaluation on Contaminated Large Language Modelscited by 13
Built on by
Citing papers per year: 2024: 2; 2025: 12; 2026: 19.
33 papers.
Sort:
By area:
- 2024MLE-bench: Evaluating Machine Learning Agents on Machine Learning Engineeringcited by 429
- 2025Recent Advances in Large Langauge Model Benchmarks against Data Contamination: From Static to Dynamic Evaluationcited by 38
- 2025Time Travel is Cheating: Going Live with DeepFund for Real-Time Fund Investment Benchmarkingcited by 21
- 2024Eureka: Evaluating and Understanding Large Foundation Modelscited by 18
- 2025MathConstruct: Challenging LLM Reasoning with Constructive Proofscited by 16
- 2025How Contaminated Is Your Benchmark? Quantifying Dataset Leakage in Large Language Models with Kernel Divergencecited by 13
- 2025AdaCoder: An Adaptive Planning and Multi-Agent Framework for Function-Level Code Generationcited by 8
- 2026Reward Modeling for Reinforcement Learning-Based LLM Reasoning: Design, Challenges, and Evaluationcited by 5
- 2025Detecting Data Contamination from Reinforcement Learning Post-training for Large Language Modelscited by 4
- 2026A Statistical Framework for Auditing Behavioral Dependence and Induced Bias in LLM Judgescited by 4
- 2025Streamlining evidence based clinical recommendations with large language modelscited by 3
- 2025Lean Meets Theoretical Computer Science: Scalable Synthesis of Theorem Proving Challenges in Formal-Informal Pairscited by 3
21 more
- 2026TSFMAudit: Data Contamination Auditing in Forecasting Time Series Foundation Modelscited by 3
- 2025LLM-as-a-Judge is Bad, Based on AI Attempting the Exam Qualifying for the Member of the Polish National Board of Appealcited by 2
- 2026Scaling Large Reasoning Models beyond Human Supervision: A Path toward Superintelligencecited by 2
- 2025AdEval: Alignment-based Dynamic Evaluation to Mitigate Data Contamination in Large Language Modelscited by 1
- 2025Provable Training Data Identification for Large Language Modelscited by 1
- 2026Obscuring Data Contamination Through Translation: Evidence from Arabic Corporacited by 1
- 2026Pretraining Data Exposure in Large Language Models: A Survey of Membership Inference, Data Contamination, and Security Implicationscited by 1
- 2026The Reliability Gap in Benchmark Auditing: Distribution Shift and Scale as Failure Modes of Contamination Detectioncited by 1
- 2026Contamination Inflates Scores but Rarely Reorders Large Language Model Leaderboardscited by 1
- 2025RN-F: A Novel Approach for Mitigating Contaminated Data in Large Language Modelscited by 0
- 2026Silicon Bureaucracy and AI Test-Oriented Education: Contamination Sensitivity and Score Confidence in LLM Benchmarkscited by 0
- 2026On Emotion-Sensitive Decision Making of Small Language Model Agentscited by 0
- 2026SPENCE: A Syntactic Probe for Detecting Contamination in NL2SQL Benchmarkscited by 0
- 2026Data Contamination in Neural Hieroglyphic Translation: A Reproducibility Studycited by 0
- 2026Physics-R1: An Audited Olympiad Corpus and Released Verifiers for Visual Physics Reasoningcited by 0
- 2026Correcting test set contamination by spiking the training datacited by 0
- 2026Validity Threats for Foundation Model Researchcited by 0
- 2026Same Question, Different Answers: Evaluating LLM Reliability Beyond Accuracycited by 0
- 2026Temporal Leakage in LLM Backtesting: Measurement, Validation, and Adjusted Scorescited by 0
- 2026Benchmark Contamination: A Taxonomy Organized by Defeated Mitigationcited by 0
- 2026CleanScore: Black-Box Benchmark Audits with Negative Controls and Sensitivity Boundscited by 0
- 2026Scaling Large Reasoning Models beyond Human Supervision: A Path toward Superintelligence31 Aug 2026
- 2026Benchmark Contamination: A Taxonomy Organized by Defeated Mitigation29 Aug 2026
- 2026CleanScore: Black-Box Benchmark Audits with Negative Controls and Sensitivity Bounds27 Aug 2026
- 2026Temporal Leakage in LLM Backtesting: Measurement, Validation, and Adjusted Scores4 Aug 2026
- 2026Contamination Inflates Scores but Rarely Reorders Large Language Model Leaderboards5 Jul 2026
- 2026Validity Threats for Foundation Model Research3 Jun 2026
- 2026The Reliability Gap in Benchmark Auditing: Distribution Shift and Scale as Failure Modes of Contamination Detection2 Jun 2026
- 2026TSFMAudit: Data Contamination Auditing in Forecasting Time Series Foundation Models24 May 2026
- 2026Correcting test set contamination by spiking the training data24 May 2026
- 2026Pretraining Data Exposure in Large Language Models: A Survey of Membership Inference, Data Contamination, and Security Implications21 May 2026
- 2026Same Question, Different Answers: Evaluating LLM Reliability Beyond Accuracy18 May 2026
- 2026Physics-R1: An Audited Olympiad Corpus and Released Verifiers for Visual Physics Reasoning13 May 2026
21 more
- 2026Data Contamination in Neural Hieroglyphic Translation: A Reproducibility Study8 May 2026
- 2026SPENCE: A Syntactic Probe for Detecting Contamination in NL2SQL Benchmarks20 Apr 2026
- 2026A Statistical Framework for Auditing Behavioral Dependence and Induced Bias in LLM Judges8 Apr 2026
- 2026On Emotion-Sensitive Decision Making of Small Language Model Agents8 Apr 2026
- 2026Silicon Bureaucracy and AI Test-Oriented Education: Contamination Sensitivity and Score Confidence in LLM Benchmarks23 Mar 2026
- 2026Reward Modeling for Reinforcement Learning-Based LLM Reasoning: Design, Challenges, and Evaluation10 Feb 2026
- 2026Obscuring Data Contamination Through Translation: Evidence from Arabic Corpora21 Jan 2026
- 2025LLM-as-a-Judge is Bad, Based on AI Attempting the Exam Qualifying for the Member of the Polish National Board of Appeal6 Nov 2025
- 2025Provable Training Data Identification for Large Language Models10 Oct 2025
- 2025Detecting Data Contamination from Reinforcement Learning Post-training for Large Language Models10 Oct 2025
- 2025Lean Meets Theoretical Computer Science: Scalable Synthesis of Theorem Proving Challenges in Formal-Informal Pairs21 Aug 2025
- 2025RN-F: A Novel Approach for Mitigating Contaminated Data in Large Language Models19 May 2025
- 2025Time Travel is Cheating: Going Live with DeepFund for Real-Time Fund Investment Benchmarking16 May 2025
- 2025Streamlining evidence based clinical recommendations with large language models15 May 2025
- 2025AdaCoder: An Adaptive Planning and Multi-Agent Framework for Function-Level Code Generation5 Apr 2025
- 2025Recent Advances in Large Langauge Model Benchmarks against Data Contamination: From Static to Dynamic Evaluation23 Feb 2025
- 2025MathConstruct: Challenging LLM Reasoning with Constructive Proofs14 Feb 2025
- 2025How Contaminated Is Your Benchmark? Quantifying Dataset Leakage in Large Language Models with Kernel Divergence2 Feb 2025
- 2025AdEval: Alignment-based Dynamic Evaluation to Mitigate Data Contamination in Large Language Models23 Jan 2025
- 2024MLE-bench: Evaluating Machine Learning Agents on Machine Learning Engineering9 Oct 2024
- 2024Eureka: Evaluating and Understanding Large Foundation Models13 Sep 2024
- 2025MathConstruct: Challenging LLM Reasoning with Constructive Proofscited by 16
- 2026Reward Modeling for Reinforcement Learning-Based LLM Reasoning: Design, Challenges, and Evaluationcited by 5
- 2025Lean Meets Theoretical Computer Science: Scalable Synthesis of Theorem Proving Challenges in Formal-Informal Pairscited by 3
- 2026Scaling Large Reasoning Models beyond Human Supervision: A Path toward Superintelligencecited by 2
- 2026Scaling Large Reasoning Models beyond Human Supervision: A Path toward Superintelligence31 Aug 2026
- 2026Reward Modeling for Reinforcement Learning-Based LLM Reasoning: Design, Challenges, and Evaluation10 Feb 2026
- 2025Lean Meets Theoretical Computer Science: Scalable Synthesis of Theorem Proving Challenges in Formal-Informal Pairs21 Aug 2025
- 2025MathConstruct: Challenging LLM Reasoning with Constructive Proofs14 Feb 2025
- 2025Recent Advances in Large Langauge Model Benchmarks against Data Contamination: From Static to Dynamic Evaluationcited by 38
- 2025Time Travel is Cheating: Going Live with DeepFund for Real-Time Fund Investment Benchmarkingcited by 21
- 2024Eureka: Evaluating and Understanding Large Foundation Modelscited by 18
- 2025How Contaminated Is Your Benchmark? Quantifying Dataset Leakage in Large Language Models with Kernel Divergencecited by 13
- 2025Detecting Data Contamination from Reinforcement Learning Post-training for Large Language Modelscited by 4
- 2026A Statistical Framework for Auditing Behavioral Dependence and Induced Bias in LLM Judgescited by 4
- 2025Streamlining evidence based clinical recommendations with large language modelscited by 3
- 2026TSFMAudit: Data Contamination Auditing in Forecasting Time Series Foundation Modelscited by 3
- 2025LLM-as-a-Judge is Bad, Based on AI Attempting the Exam Qualifying for the Member of the Polish National Board of Appealcited by 2
- 2025AdEval: Alignment-based Dynamic Evaluation to Mitigate Data Contamination in Large Language Modelscited by 1
- 2025Provable Training Data Identification for Large Language Modelscited by 1
- 2026Obscuring Data Contamination Through Translation: Evidence from Arabic Corporacited by 1
12 most cited of 25 All 25 (JSON)
- 2026Benchmark Contamination: A Taxonomy Organized by Defeated Mitigation29 Aug 2026
- 2026CleanScore: Black-Box Benchmark Audits with Negative Controls and Sensitivity Bounds27 Aug 2026
- 2026Temporal Leakage in LLM Backtesting: Measurement, Validation, and Adjusted Scores4 Aug 2026
- 2026Contamination Inflates Scores but Rarely Reorders Large Language Model Leaderboards5 Jul 2026
- 2026Validity Threats for Foundation Model Research3 Jun 2026
- 2026The Reliability Gap in Benchmark Auditing: Distribution Shift and Scale as Failure Modes of Contamination Detection2 Jun 2026
- 2026TSFMAudit: Data Contamination Auditing in Forecasting Time Series Foundation Models24 May 2026
- 2026Correcting test set contamination by spiking the training data24 May 2026
- 2026Same Question, Different Answers: Evaluating LLM Reliability Beyond Accuracy18 May 2026
- 2026Physics-R1: An Audited Olympiad Corpus and Released Verifiers for Visual Physics Reasoning13 May 2026
- 2026Data Contamination in Neural Hieroglyphic Translation: A Reproducibility Study8 May 2026
- 2026SPENCE: A Syntactic Probe for Detecting Contamination in NL2SQL Benchmarks20 Apr 2026
12 newest of 25 All 25 (JSON)