How Much Can We Forget about Data Contamination?
Not on the map. Why?
Abstract (arXiv)
The leakage of benchmark data into the training data has emerged as a significant challenge for evaluating the capabilities of large language models (LLMs). In this work, we challenge the common assumption that small-scale contamination renders benchmark evaluations invalid. First, we experimentally quantify the magnitude of benchmark overfitting based on scaling along three dimensions: The number of model parameters (up to 1.6B), the number of times an example is seen (up to 144), and the number of training tokens (up to 40B). If model and data follow the Chinchilla scaling laws, minor contamination indeed leads to overfitting. At the same time, even 144 times of contamination can be forgotten if the training data is scaled beyond five times Chinchilla, a regime characteristic of many modern LLMs. Continual pre-training of OLMo-7B corroborates these results. Next, we study the impact of the weight decay parameter on example forgetting, showing that empirical forgetting occurs faster than the cumulative weight decay. This allows us to gauge the degree of example forgetting in large-scale training runs, indicating that many LLMs, including Lllama 3 405B, have forgotten the data seen at the beginning of training.
Key facts. Cited by 14 papers in the map (data through 7 Oct 2026). Builds on 60 of its 78 references that are in the map. First posted on arXiv 4 Oct 2024.
Builds on
60 of 78 references.
References · 60
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2019PyTorch: An Imperative Style, High-Performance Deep Learning Librarycited by 20,160
- 2023GPT-4 Technical Reportcited by 18,132
- 2024The Llama 3 Herd of Modelscited by 14,192
- 2020Measuring Massive Multitask Language Understandingcited by 7,768
- 2022PaLM: Scaling Language Modeling with Pathwayscited by 5,304
- 2018Think you have Solved Question Answering? Try ARC, the AI2 Reasoning Challengecited by 4,710
- 2019HellaSwag: Can a Machine Really Finish Your Sentence?cited by 4,018
- 2022Training Compute-Optimal Large Language Modelscited by 2,927
- 2019PIQA: Reasoning about Physical Commonsense in Natural Languagecited by 2,818
- 2020Extracting Training Data from Large Language Modelscited by 2,144
- 2019BoolQ: Exploring the Surprising Difficulty of Natural Yes/No Questionscited by 2,140
38 more
- 2024Gemma 2: Improving Open Language Models at a Practical Sizecited by 1,928
- 2017Gradient Episodic Memory for Continual Learningcited by 1,871
- 2017Understanding Black-box Predictions via Influence Functionscited by 1,714
- 2016Understanding deep learning requires rethinking generalizationcited by 1,657
- 2018The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networkscited by 847
- 2022Quantifying Memorization Across Neural Language Modelscited by 755
- 2018An Empirical Study of Example Forgetting during Deep Neural Network Learningcited by 669
- 2023An Empirical Study of Catastrophic Forgetting in Large Language Models During Continual Fine-tuningcited by 622
- 2019Data Shapley: Equitable Valuation of Data for Machine Learningcited by 617
- 2024OLMo: Accelerating the Science of Language Modelscited by 599
- 2015Train faster, generalize better: Stability of stochastic gradient descentcited by 547
- 2024Dolma: an Open Corpus of Three Trillion Tokens for Language Model Pretraining Researchcited by 475
- 2023Scalable Extraction of Training Data from (Production) Language Modelscited by 415
- 2023Scaling Data-Constrained Language Modelscited by 391
- 2023Studying Large Language Model Generalization with Influence Functionscited by 311
- 2020Amnesiac Machine Learningcited by 305
- 2023TRAK: Attributing Model Behavior at Scalecited by 273
- 2023Physics of Language Models: Part 3.1, Knowledge Storage and Extractioncited by 264
- 2020Influence Functions in Deep Learning Are Fragilecited by 247
- 2022Data Contamination: From Memorization to Exploitationcited by 234
- 2023Proving Test Set Contamination in Black Box Language Modelscited by 227
- 2022Memorization Without Overfitting: Analyzing the Training Dynamics of Large Language Modelscited by 218
- 2023Rethinking Benchmark and Contamination for Language Models with Rephrased Samplescited by 192
- 2022Datamodels: Predicting Predictions from Training Datacited by 186
- 2023Time Travel in LLMs: Tracing Data Contamination in Large Language Modelscited by 175
- 2023Beyond Chinchilla-Optimal: Accounting for Inference in Language Model Scaling Lawscited by 155
- 2023Emergent and Predictable Memorization in Large Language Modelscited by 147
- 2022If Influence Functions are the Answer, Then What is the Question?cited by 142
- 2024Benchmark Data Contamination of Large Language Models: A Surveycited by 138
- 2023Investigating Data Contamination in Modern Benchmarks for Large Language Modelscited by 136
- 2017L2 Regularization versus Batch and Weight Normalizationcited by 121
- 2022Measuring Forgetting of Memorized Training Examplescited by 118
- 2024Mitigating Catastrophic Forgetting in Large Language Models with Self-Synthesized Rehearsalcited by 114
- 2018Three Mechanisms of Weight Decay Regularizationcited by 112
- 2023Task Contamination: Language Models May Not Be Few-Shot Anymorecited by 98
- 2024Investigating Data Contamination for Pre-training Language Modelscited by 91
- 2024What is Your Data Worth to GPT? LLM-Scale Data Valuation with Influence Functionscited by 88
- 2024How Do Large Language Models Acquire Factual Knowledge During Pretraining?cited by 86
50 most cited of 60 All 60 (JSON)
Built on by
Citing papers per year: 2025: 6; 2026: 8.
14 papers.
Sort:
By area:
- 2025DCR: Quantifying Data Contamination in LLMs Evaluationcited by 10
- 2025On The Fragility of Benchmark Contamination Detection in Reasoning Modelscited by 8
- 2025Train Once, Answer All: Many Pretraining Experiments for the Cost of Onecited by 6
- 2025Scalable Valuation of Human Feedback through Provably Robust Model Alignmentcited by 4
- 2026Weight Decay Improves Language Model Plasticitycited by 4
- 2026From Safety Risk to Design Principle: Peer-Preservation in Multi-Agent LLM Systems and Its Implications for Orchestrated Democratic Discourse Analysiscited by 3
- 2025Predicting Language Models' Success at Zero-Shot Probabilistic Predictioncited by 2
- 2025Data-Centric Lessons To Improve Speech-Language Pretrainingcited by 2
- 2026Leaderboard Incentives: Model Rankings under Strategic Post-Trainingcited by 2
- 2026In-Context Molecular Property Prediction with LLMs: A Blinding Study on Memorization and Knowledge Conflictscited by 2
- 2026Quantifying the Effect of Test Set Contamination on Generative Evaluationscited by 1
- 2026DataComp-VLM: Improved Open Datasets for Vision-Language Modelscited by 1
- 2026DataComp-VLM: Improved Open Datasets for Vision-Language Models26 Jun 2026
- 2026Correcting test set contamination by spiking the training data24 May 2026
- 2026Provable Joint Decontamination for Benchmarking Multiple Large Language Models20 May 2026
- 2026From Safety Risk to Design Principle: Peer-Preservation in Multi-Agent LLM Systems and Its Implications for Orchestrated Democratic Discourse Analysis9 Apr 2026
- 2026In-Context Molecular Property Prediction with LLMs: A Blinding Study on Memorization and Knowledge Conflicts26 Mar 2026
- 2026Leaderboard Incentives: Model Rankings under Strategic Post-Training9 Mar 2026
- 2026Weight Decay Improves Language Model Plasticity11 Feb 2026
- 2026Quantifying the Effect of Test Set Contamination on Generative Evaluations7 Jan 2026
- 2025Data-Centric Lessons To Improve Speech-Language Pretraining22 Oct 2025
- 2025On The Fragility of Benchmark Contamination Detection in Reasoning Models30 Sep 2025
- 2025Train Once, Answer All: Many Pretraining Experiments for the Cost of One27 Sep 2025
- 2025Predicting Language Models' Success at Zero-Shot Probabilistic Prediction18 Sep 2025
2 more
- 2025DCR: Quantifying Data Contamination in LLMs Evaluationcited by 10
- 2025Train Once, Answer All: Many Pretraining Experiments for the Cost of Onecited by 6
- 2026Weight Decay Improves Language Model Plasticitycited by 4
- 2025Predicting Language Models' Success at Zero-Shot Probabilistic Predictioncited by 2
- 2025Data-Centric Lessons To Improve Speech-Language Pretrainingcited by 2
- 2026Leaderboard Incentives: Model Rankings under Strategic Post-Trainingcited by 2
- 2026In-Context Molecular Property Prediction with LLMs: A Blinding Study on Memorization and Knowledge Conflictscited by 2
- 2026Quantifying the Effect of Test Set Contamination on Generative Evaluationscited by 1
- 2026Provable Joint Decontamination for Benchmarking Multiple Large Language Modelscited by 0
- 2026Correcting test set contamination by spiking the training datacited by 0
- 2026Correcting test set contamination by spiking the training data24 May 2026
- 2026Provable Joint Decontamination for Benchmarking Multiple Large Language Models20 May 2026
- 2026In-Context Molecular Property Prediction with LLMs: A Blinding Study on Memorization and Knowledge Conflicts26 Mar 2026
- 2026Leaderboard Incentives: Model Rankings under Strategic Post-Training9 Mar 2026
- 2026Weight Decay Improves Language Model Plasticity11 Feb 2026
- 2026Quantifying the Effect of Test Set Contamination on Generative Evaluations7 Jan 2026
- 2025Data-Centric Lessons To Improve Speech-Language Pretraining22 Oct 2025
- 2025Train Once, Answer All: Many Pretraining Experiments for the Cost of One27 Sep 2025
- 2025Predicting Language Models' Success at Zero-Shot Probabilistic Prediction18 Sep 2025
- 2025DCR: Quantifying Data Contamination in LLMs Evaluation15 Jul 2025