PaCoST: Paired Confidence Significance Testing for Benchmark Contamination Detection in Large Language Models
Not on the map. Why?
Abstract (arXiv)
Large language models (LLMs) are known to be trained on vast amounts of data, which may unintentionally or intentionally include data from commonly used benchmarks. This inclusion can lead to cheatingly high scores on model leaderboards, yet result in disappointing performance in real-world applications. To address this benchmark contamination problem, we first propose a set of requirements that practical contamination detection methods should follow. Following these proposed requirements, we introduce PaCoST, a Paired Confidence Significance Testing to effectively detect benchmark contamination in LLMs. Our method constructs a counterpart for each piece of data with the same distribution, and performs statistical analysis of the corresponding confidence to test whether the model is significantly more confident under the original benchmark. We validate the effectiveness of PaCoST and apply it on popular open-source models and benchmarks. We find that almost all models and benchmarks we tested are suspected contaminated more or less. We finally call for new LLM evaluation methods.
Key facts. Cited by 5 papers in the map (data through 7 Oct 2026). Builds on 30 of its 56 references that are in the map. First posted on arXiv 26 Jun 2024.
Builds on
30 of 56 references.
References · 30
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
- 2020Measuring Massive Multitask Language Understandingcited by 7,768
- 2022Self-Consistency Improves Chain of Thought Reasoning in Language Modelscited by 5,601
- 2019BERTScore: Evaluating Text Generation with BERTcited by 5,462
- 2022PaLM: Scaling Language Modeling with Pathwayscited by 5,304
- 2018Think you have Solved Question Answering? Try ARC, the AI2 Reasoning Challengecited by 4,710
- 2019HellaSwag: Can a Machine Really Finish Your Sentence?cited by 4,018
- 2021Finetuned Language Models Are Zero-Shot Learnerscited by 3,747
- 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,919
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,221
- 2020Extracting Training Data from Large Language Modelscited by 2,144
18 more
- 2022Language Models (Mostly) Know What They Knowcited by 1,783
- 2019SuperGLUE: A Stickier Benchmark for General-Purpose Language Understanding Systemscited by 1,718
- 2023Can LLMs Express Their Uncertainty? An Empirical Evaluation of Confidence Elicitation in LLMscited by 946
- 2023Just Ask for Calibration: Strategies for Eliciting Calibrated Confidence Scores from Language Models Fine-Tuned with Human Feedbackcited by 788
- 2022Teaching Models to Express Their Uncertainty in Wordscited by 731
- 2024Yi: Open Foundation Models by 01.AIcited by 706
- 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearningcited by 488
- 2023Scalable Extraction of Training Data from (Production) Language Modelscited by 415
- 2023NLP Evaluation in trouble: On the Need to Measure LLM Data Contamination for each Benchmarkcited by 339
- 2023Membership Inference Attacks against Language Models via Neighbourhood Comparisoncited by 249
- 2023Proving Test Set Contamination in Black Box Language Modelscited by 227
- 2020Auditing Differentially Private Machine Learning: How Private is Private SGD?cited by 213
- 2023Rethinking Benchmark and Contamination for Language Models with Rephrased Samplescited by 192
- 2024A Careful Examination of Large Language Model Performance on Grade School Arithmeticcited by 188
- 2022Quantifying Privacy Risks of Masked Language Models Using Membership Inference Attackscited by 168
- 2023Knowing What LLMs DO NOT Know: A Simple Yet Effective Self-Detection Methodcited by 51
- 2023Estimating Contamination via Perplexity: Quantifying Memorisation in Language Model Evaluationcited by 47
- 2021Membership Inference on Word Embedding and Beyondcited by 34
Built on by
Citing papers per year: 2025: 1; 2026: 4.
5 papers.
- 2025STAMP Your Content: Proving Dataset Membership via Watermarked Rephrasingscited by 8
- 2026Harness-agnostic detection and immunization of reward hacking in self-evolving language modelscited by 1
- 2026VeRA: Renewing Reasoning Benchmarks with Executable Specificationscited by 0
- 2026MC-PDD: Masked Corpus-Level Pretraining Data Detection for Black-Box Large Language Modelscited by 0
- 2026CleanScore: Black-Box Benchmark Audits with Negative Controls and Sensitivity Boundscited by 0
- 2026Harness-agnostic detection and immunization of reward hacking in self-evolving language models4 Sep 2026
- 2026CleanScore: Black-Box Benchmark Audits with Negative Controls and Sensitivity Bounds27 Aug 2026
- 2026MC-PDD: Masked Corpus-Level Pretraining Data Detection for Black-Box Large Language Models6 Jun 2026
- 2026VeRA: Renewing Reasoning Benchmarks with Executable Specifications23 Jan 2026
- 2025STAMP Your Content: Proving Dataset Membership via Watermarked Rephrasings18 Apr 2025