Towards Data Contamination Detection for Modern Large Language Models: Limitations, Inconsistencies, and Oracle Challenges
Not on the map. Why?
Abstract (arXiv)
As large language models achieve increasingly impressive results, questions arise about whether such performance is from generalizability or mere data memorization. Thus, numerous data contamination detection methods have been proposed. However, these approaches are often validated with traditional benchmarks and early-stage LLMs, leaving uncertainty about their effectiveness when evaluating state-of-the-art LLMs on the contamination of more challenging benchmarks. To address this gap and provide a dual investigation of SOTA LLM contamination status and detection method robustness, we evaluate five contamination detection approaches with four state-of-the-art LLMs across eight challenging datasets often used in modern LLM evaluation. Our analysis reveals that (1) Current methods have non-trivial limitations in their assumptions and practical applications; (2) Notable difficulties exist in detecting contamination introduced during instruction fine-tuning with answer augmentation; and (3) Limited consistencies between SOTA contamination detection techniques. These findings highlight the complexity of contamination detection in advanced LLMs and the urgent need for further research on robust and generalizable contamination evaluation. Our code is available at https://github.com/vsamuel2003/data-contamination.
Key facts. Cited by 18 papers in the map (data through 14 Oct 2026). Builds on 17 of its 21 references that are in the map. First posted on arXiv 16 Sep 2024.
Builds on
17 of 21 references.
References · 17
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
- 2021Training Verifiers to Solve Math Word Problemscited by 10,109
- 2021Evaluating Large Language Models Trained on Codecited by 8,320
- 2020Measuring Massive Multitask Language Understandingcited by 7,963
- 2018Think you have Solved Question Answering? Try ARC, the AI2 Reasoning Challengecited by 4,886
- 2015Character-level Convolutional Networks for Text Classificationcited by 2,330
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,281
- 2020Extracting Training Data from Large Language Modelscited by 2,189
- 2022Beyond the Imitation Game: Quantifying and extrapolating the capabilities of language modelscited by 1,998
- 2022Challenging BIG-Bench Tasks and Whether Chain-of-Thought Can Solve Themcited by 1,807
- 2019DROP: A Reading Comprehension Benchmark Requiring Discrete Reasoning Over Paragraphscited by 903
- 2023NLP Evaluation in trouble: On the Need to Measure LLM Data Contamination for each Benchmarkcited by 348
5 more
- 2023Proving Test Set Contamination in Black Box Language Modelscited by 230
- 2024Leak, Cheat, Repeat: Data Contamination and Evaluation Malpractices in Closed-Source LLMscited by 229
- 2023Stop Uploading Test Data in Plain Text: Practical Strategies for Mitigating Data Contamination by Evaluation Benchmarkscited by 142
- 2024Data Contamination Can Cross Language Barrierscited by 26
- 2024ImplicitAVE: An Open-Source Dataset and Multimodal LLMs Benchmark for Implicit Attribute Value Extractioncited by 17
Built on by
Citing papers per year: 2024: 2; 2025: 8; 2026: 8.
18 papers.
Sort:
By area:
- 2025Towards Holistic Evaluation of Large Audio-Language Models: A Comprehensive Surveycited by 39
- 2025On The Fragility of Benchmark Contamination Detection in Reasoning Modelscited by 9
- 2024The Impact of Copyrighted Material on Large Language Models: A Norwegian Perspectivecited by 8
- 2026Unlocking Multimodal Document Intelligence: From Current Triumphs to Future Frontiers of Visual Document Retrievalcited by 8
- 2025None of the Others: a General Technique to Distinguish Reasoning from Memorization in Multiple-Choice LLM Evaluation Benchmarkscited by 6
- 2025NotSoTiny: A Large, Living Benchmark for RTL Code Generationcited by 4
- 2026ClaimDB: A Fact Verification Benchmark over Large Structured Datacited by 3
- 2025Simulating Training Data Leakage in Multiple-Choice Benchmarks for LLM Evaluationcited by 2
- 2026LLM Benchmark Datasets Should Be Contamination-Resistantcited by 2
- 2025LLM Performance for Code Generation on Noisy Taskscited by 1
- 2025Text-to-SQL Task-oriented Dialogue Ontology Constructioncited by 1
- 2026Obscuring Data Contamination Through Translation: Evidence from Arabic Corporacited by 1
6 more
- 2026Beyond Accuracy: Introducing a Symbolic-Mechanistic Approach to Interpretable Evaluationcited by 1
- 2026Pretraining Data Exposure in Large Language Models: A Survey of Membership Inference, Data Contamination, and Security Implicationscited by 1
- 2024Beyond Visual Understanding: Introducing PARROT-360V for Vision Language Model Benchmarkingcited by 0
- 2025RN-F: A Novel Approach for Mitigating Contaminated Data in Large Language Modelscited by 0
- 2026Learning to Aggregate Zero-Shot LLM Agents for Corporate Disclosure Classificationcited by 0
- 2026When Is Benchmark Contamination Detectable? Information Limits and Power-Calibrated Auditscited by 0
- 2026When Is Benchmark Contamination Detectable? Information Limits and Power-Calibrated Audits8 Aug 2026
- 2026Pretraining Data Exposure in Large Language Models: A Survey of Membership Inference, Data Contamination, and Security Implications21 May 2026
- 2026LLM Benchmark Datasets Should Be Contamination-Resistant19 May 2026
- 2026Learning to Aggregate Zero-Shot LLM Agents for Corporate Disclosure Classification21 Mar 2026
- 2026Beyond Accuracy: Introducing a Symbolic-Mechanistic Approach to Interpretable Evaluation6 Mar 2026
- 2026Unlocking Multimodal Document Intelligence: From Current Triumphs to Future Frontiers of Visual Document Retrieval23 Feb 2026
- 2026Obscuring Data Contamination Through Translation: Evidence from Arabic Corpora21 Jan 2026
- 2026ClaimDB: A Fact Verification Benchmark over Large Structured Data21 Jan 2026
- 2025NotSoTiny: A Large, Living Benchmark for RTL Code Generation23 Dec 2025
- 2025On The Fragility of Benchmark Contamination Detection in Reasoning Models30 Sep 2025
- 2025Text-to-SQL Task-oriented Dialogue Ontology Construction31 Jul 2025
- 2025Simulating Training Data Leakage in Multiple-Choice Benchmarks for LLM Evaluation30 May 2025
6 more
- 2025LLM Performance for Code Generation on Noisy Tasks29 May 2025
- 2025Towards Holistic Evaluation of Large Audio-Language Models: A Comprehensive Survey21 May 2025
- 2025RN-F: A Novel Approach for Mitigating Contaminated Data in Large Language Models19 May 2025
- 2025None of the Others: a General Technique to Distinguish Reasoning from Memorization in Multiple-Choice LLM Evaluation Benchmarks18 Feb 2025
- 2024The Impact of Copyrighted Material on Large Language Models: A Norwegian Perspective12 Dec 2024
- 2024Beyond Visual Understanding: Introducing PARROT-360V for Vision Language Model Benchmarking20 Nov 2024
- 2025Towards Holistic Evaluation of Large Audio-Language Models: A Comprehensive Surveycited by 39
- 2024The Impact of Copyrighted Material on Large Language Models: A Norwegian Perspectivecited by 8
- 2026Unlocking Multimodal Document Intelligence: From Current Triumphs to Future Frontiers of Visual Document Retrievalcited by 8
- 2025NotSoTiny: A Large, Living Benchmark for RTL Code Generationcited by 4
- 2026ClaimDB: A Fact Verification Benchmark over Large Structured Datacited by 3
- 2025Simulating Training Data Leakage in Multiple-Choice Benchmarks for LLM Evaluationcited by 2
- 2026LLM Benchmark Datasets Should Be Contamination-Resistantcited by 2
- 2025LLM Performance for Code Generation on Noisy Taskscited by 1
- 2025Text-to-SQL Task-oriented Dialogue Ontology Constructioncited by 1
- 2026Obscuring Data Contamination Through Translation: Evidence from Arabic Corporacited by 1
- 2026Beyond Accuracy: Introducing a Symbolic-Mechanistic Approach to Interpretable Evaluationcited by 1
- 2025RN-F: A Novel Approach for Mitigating Contaminated Data in Large Language Modelscited by 0
12 most cited of 14 All 14 (JSON)
- 2026When Is Benchmark Contamination Detectable? Information Limits and Power-Calibrated Audits8 Aug 2026
- 2026LLM Benchmark Datasets Should Be Contamination-Resistant19 May 2026
- 2026Learning to Aggregate Zero-Shot LLM Agents for Corporate Disclosure Classification21 Mar 2026
- 2026Beyond Accuracy: Introducing a Symbolic-Mechanistic Approach to Interpretable Evaluation6 Mar 2026
- 2026Unlocking Multimodal Document Intelligence: From Current Triumphs to Future Frontiers of Visual Document Retrieval23 Feb 2026
- 2026Obscuring Data Contamination Through Translation: Evidence from Arabic Corpora21 Jan 2026
- 2026ClaimDB: A Fact Verification Benchmark over Large Structured Data21 Jan 2026
- 2025NotSoTiny: A Large, Living Benchmark for RTL Code Generation23 Dec 2025
- 2025Text-to-SQL Task-oriented Dialogue Ontology Construction31 Jul 2025
- 2025Simulating Training Data Leakage in Multiple-Choice Benchmarks for LLM Evaluation30 May 2025
- 2025LLM Performance for Code Generation on Noisy Tasks29 May 2025
- 2025Towards Holistic Evaluation of Large Audio-Language Models: A Comprehensive Survey21 May 2025
12 newest of 14 All 14 (JSON)