Data Contamination Can Cross Language Barriers
Not on the map. Why?
Abstract (arXiv)
The opacity in developing large language models (LLMs) is raising growing concerns about the potential contamination of public benchmarks in the pre-training data. Existing contamination detection methods are typically based on the text overlap between training and evaluation data, which can be too superficial to reflect deeper forms of contamination. In this paper, we first present a cross-lingual form of contamination that inflates LLMs' performance while evading current detection methods, deliberately injected by overfitting LLMs on the translated versions of benchmark test sets. Then, we propose generalization-based approaches to unmask such deeply concealed contamination. Specifically, we examine the LLM's performance change after modifying the original benchmark by replacing the false answer choices with correct ones from other questions. Contaminated models can hardly generalize to such easier situations, where the false choices can be not even wrong, as all choices are correct in their memorization. Experimental results demonstrate that cross-lingual contamination can easily fool existing detection methods, but not ours. In addition, we discuss the potential utilization of cross-lingual contamination in interpreting LLMs' working mechanisms and in post-training LLMs for enhanced multilingual capabilities. The code and dataset we use can be obtained from urlhttps://github.com/ShangDataLab/Deep-Contam.
Key facts. Cited by 26 papers in the map (data through 7 Oct 2026). Builds on 19 of its 26 references that are in the map. First posted on arXiv 19 Jun 2024.
Builds on
19 of 26 references.
References · 19
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
- 2020Measuring Massive Multitask Language Understandingcited by 7,768
- 2022PaLM: Scaling Language Modeling with Pathwayscited by 5,304
- 2018Think you have Solved Question Answering? Try ARC, the AI2 Reasoning Challengecited by 4,710
- 2019Unsupervised Cross-lingual Representation Learning at Scalecited by 3,907
- 2023Qwen Technical Reportcited by 3,273
- 2019MathQA: Towards Interpretable Math Word Problem Solving with Operation-Based Formalismscited by 653
- 2021Documenting Large Webtext Corpora: A Case Study on the Colossal Clean Crawled Corpuscited by 481
- 2023Scalable Extraction of Training Data from (Production) Language Modelscited by 415
- 2019Beto, Bentz, Becas: The Surprising Cross-Lingual Effectiveness of BERTcited by 301
7 more
- 2024Do Llamas Work in English? On the Latent Language of Multilingual Transformerscited by 275
- 2023Time Travel in LLMs: Tracing Data Contamination in Large Language Modelscited by 175
- 2023Platypus: Quick, Cheap, and Powerful Refinement of LLMscited by 150
- 2024Investigating Data Contamination for Pre-training Language Modelscited by 91
- 2024Quantifying Contamination in Evaluating Code Generation Capabilities of Language Modelscited by 62
- 2023Estimating Contamination via Perplexity: Quantifying Memorisation in Language Model Evaluationcited by 47
- 2024MindMerger: Efficient Boosting LLM Reasoning in non-English Languagescited by 21
Built on by
Citing papers per year: 2024: 4; 2025: 11; 2026: 11.
26 papers.
Sort:
By area:
- 2025Preference Leakage: A Contamination Problem in LLM-as-a-judgecited by 119
- 2024On Memorization of Large Language Models in Logical Reasoningcited by 114
- 2024SoK: Membership Inference Attacks on LLMs are Rushing Nowhere (and How to Fix It)cited by 54
- 2025A Survey on Data Contamination for Large Language Modelscited by 33
- 2025The Bitter Lesson Learned from 2,000+ Multilingual Benchmarkscited by 31
- 2024Towards Data Contamination Detection for Modern Large Language Models: Limitations, Inconsistencies, and Oracle Challengescited by 18
- 2025Forget What You Know about LLMs Evaluations -- LLMs are Like a Chameleoncited by 11
- 2025CapBencher: Give Your LLM Benchmark a Built-in Alarm for Test-Set Overfittingcited by 6
- 2025OWL: Probing Cross-Lingual Recall of Memorized Texts via World Literaturecited by 3
- 2026When Flores Bloomz Wrong: Cross-Direction Contamination in Machine Translation Evaluationcited by 3
- 2024Risk Sources and Risk Management Measures in Support of Standards for General-Purpose AI Systemscited by 2
- 2025LogitTrace: Detecting Benchmark Contamination via Layerwise Logit Trajectoriescited by 2
14 more
- 2025LiveCLKTBench: Towards Reliable Evaluation of Cross-Lingual Knowledge Transfer in Multilingual LLMscited by 2
- 2026How Open Must Language Models be to Enable Reliable Scientific Inference?cited by 2
- 2026To See is Not to Learn: Protecting Multimodal Data from Unauthorized Fine-Tuning of Large Vision-Language Modelcited by 2
- 2025AdEval: Alignment-based Dynamic Evaluation to Mitigate Data Contamination in Large Language Modelscited by 1
- 2025RePCS: Diagnosing Data Memorization in LLM-Powered Retrieval-Augmented Generationcited by 1
- 2026Quantifying the Effect of Test Set Contamination on Generative Evaluationscited by 1
- 2026Obscuring Data Contamination Through Translation: Evidence from Arabic Corporacited by 1
- 2026Cultivar: A Contrastive and Locale-Oriented Translation Benchmark for Investigating Contamination and Localisation Robustnesscited by 1
- 2025Toward Robust Multilingual Adaptation of LLMs for Low-Resource Languagescited by 0
- 2026When AI Navigates the Fog of Warcited by 0
- 2026Measuring Evaluation-Context Divergence in Open-Weight LLMs: A Paired-Prompt Protocol with Pilot Evidence of Alignment-Pipeline-Specific Heterogeneitycited by 0
- 2026Uncertainty-based Debiasing and Unlearning for Decontaminationcited by 0
- 2026MultiSynt/MT: Trillion-Token Multi-Parallel Pre-Training Data Translated Across 36 Languagescited by 0
- 2026Detecting Pretraining Data in Large Language Models from a Free-Energy Perspectivecited by 0
- 2026Detecting Pretraining Data in Large Language Models from a Free-Energy Perspective18 Sep 2026
- 2026Cultivar: A Contrastive and Locale-Oriented Translation Benchmark for Investigating Contamination and Localisation Robustness10 Aug 2026
- 2026MultiSynt/MT: Trillion-Token Multi-Parallel Pre-Training Data Translated Across 36 Languages1 Jul 2026
- 2026Uncertainty-based Debiasing and Unlearning for Decontamination22 Jun 2026
- 2026To See is Not to Learn: Protecting Multimodal Data from Unauthorized Fine-Tuning of Large Vision-Language Model14 May 2026
- 2026Measuring Evaluation-Context Divergence in Open-Weight LLMs: A Paired-Prompt Protocol with Pilot Evidence of Alignment-Pipeline-Specific Heterogeneity7 May 2026
- 2026How Open Must Language Models be to Enable Reliable Scientific Inference?27 Mar 2026
- 2026When AI Navigates the Fog of War17 Mar 2026
- 2026When Flores Bloomz Wrong: Cross-Direction Contamination in Machine Translation Evaluation28 Jan 2026
- 2026Obscuring Data Contamination Through Translation: Evidence from Arabic Corpora21 Jan 2026
- 2026Quantifying the Effect of Test Set Contamination on Generative Evaluations7 Jan 2026
- 2025LiveCLKTBench: Towards Reliable Evaluation of Cross-Lingual Knowledge Transfer in Multilingual LLMs3 Nov 2025
14 more
- 2025Toward Robust Multilingual Adaptation of LLMs for Low-Resource Languages16 Oct 2025
- 2025LogitTrace: Detecting Benchmark Contamination via Layerwise Logit Trajectories25 Sep 2025
- 2025RePCS: Diagnosing Data Memorization in LLM-Powered Retrieval-Augmented Generation18 Jun 2025
- 2025OWL: Probing Cross-Lingual Recall of Memorized Texts via World Literature28 May 2025
- 2025CapBencher: Give Your LLM Benchmark a Built-in Alarm for Test-Set Overfitting23 May 2025
- 2025The Bitter Lesson Learned from 2,000+ Multilingual Benchmarks22 Apr 2025
- 2025A Survey on Data Contamination for Large Language Models20 Feb 2025
- 2025Forget What You Know about LLMs Evaluations -- LLMs are Like a Chameleon11 Feb 2025
- 2025Preference Leakage: A Contamination Problem in LLM-as-a-judge3 Feb 2025
- 2025AdEval: Alignment-based Dynamic Evaluation to Mitigate Data Contamination in Large Language Models23 Jan 2025
- 2024Risk Sources and Risk Management Measures in Support of Standards for General-Purpose AI Systems30 Oct 2024
- 2024On Memorization of Large Language Models in Logical Reasoning30 Oct 2024
- 2024Towards Data Contamination Detection for Modern Large Language Models: Limitations, Inconsistencies, and Oracle Challenges16 Sep 2024
- 2024SoK: Membership Inference Attacks on LLMs are Rushing Nowhere (and How to Fix It)25 Jun 2024
- 2024On Memorization of Large Language Models in Logical Reasoningcited by 114
- 2025Preference Leakage: A Contamination Problem in LLM-as-a-judgecited by 119
- 2025A Survey on Data Contamination for Large Language Modelscited by 33
- 2025The Bitter Lesson Learned from 2,000+ Multilingual Benchmarkscited by 31
- 2024Towards Data Contamination Detection for Modern Large Language Models: Limitations, Inconsistencies, and Oracle Challengescited by 18
- 2025Forget What You Know about LLMs Evaluations -- LLMs are Like a Chameleoncited by 11
- 2025CapBencher: Give Your LLM Benchmark a Built-in Alarm for Test-Set Overfittingcited by 6
- 2025OWL: Probing Cross-Lingual Recall of Memorized Texts via World Literaturecited by 3
- 2026When Flores Bloomz Wrong: Cross-Direction Contamination in Machine Translation Evaluationcited by 3
- 2024Risk Sources and Risk Management Measures in Support of Standards for General-Purpose AI Systemscited by 2
- 2025LogitTrace: Detecting Benchmark Contamination via Layerwise Logit Trajectoriescited by 2
- 2025LiveCLKTBench: Towards Reliable Evaluation of Cross-Lingual Knowledge Transfer in Multilingual LLMscited by 2
- 2026How Open Must Language Models be to Enable Reliable Scientific Inference?cited by 2
12 most cited of 21 All 21 (JSON)
- 2026Detecting Pretraining Data in Large Language Models from a Free-Energy Perspective18 Sep 2026
- 2026Cultivar: A Contrastive and Locale-Oriented Translation Benchmark for Investigating Contamination and Localisation Robustness10 Aug 2026
- 2026MultiSynt/MT: Trillion-Token Multi-Parallel Pre-Training Data Translated Across 36 Languages1 Jul 2026
- 2026Measuring Evaluation-Context Divergence in Open-Weight LLMs: A Paired-Prompt Protocol with Pilot Evidence of Alignment-Pipeline-Specific Heterogeneity7 May 2026
- 2026How Open Must Language Models be to Enable Reliable Scientific Inference?27 Mar 2026
- 2026When AI Navigates the Fog of War17 Mar 2026
- 2026When Flores Bloomz Wrong: Cross-Direction Contamination in Machine Translation Evaluation28 Jan 2026
- 2026Obscuring Data Contamination Through Translation: Evidence from Arabic Corpora21 Jan 2026
- 2026Quantifying the Effect of Test Set Contamination on Generative Evaluations7 Jan 2026
- 2025LiveCLKTBench: Towards Reliable Evaluation of Cross-Lingual Knowledge Transfer in Multilingual LLMs3 Nov 2025
- 2025Toward Robust Multilingual Adaptation of LLMs for Low-Resource Languages16 Oct 2025
- 2025LogitTrace: Detecting Benchmark Contamination via Layerwise Logit Trajectories25 Sep 2025
12 newest of 21 All 21 (JSON)