Benchmark Inflation: Revealing LLM Performance Gaps Using Retro-Holdouts
Not on the map. Why?
Abstract (arXiv)
The training data for many Large Language Models (LLMs) is contaminated with test data. This means that public benchmarks used to assess LLMs are compromised, suggesting a performance gap between benchmark scores and actual capabilities. Ideally, a private holdout set could be used to accurately verify scores. Unfortunately, such datasets do not exist for most benchmarks, and post-hoc construction of sufficiently similar datasets is non-trivial. To address these issues, we introduce a systematic methodology for (i) retrospectively constructing a holdout dataset for a target dataset, (ii) demonstrating the statistical indistinguishability of this retro-holdout dataset, and (iii) comparing LLMs on the two datasets to quantify the performance gap due to the dataset's public availability. Applying these methods to TruthfulQA, we construct and release Retro-Misconceptions, on which we evaluate twenty LLMs and find that some have inflated scores by as much as 16 percentage points. Our results demonstrate that public benchmark scores do not always accurately assess model properties, and underscore the importance of improved data practices in the field.
Key facts. Cited by 14 papers in the map (data through 14 Oct 2026). Builds on 24 of its 45 references that are in the map. First posted on arXiv 11 Oct 2024.
Builds on
24 of 45 references.
References · 24
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,399
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2021Training Verifiers to Solve Math Word Problemscited by 10,109
- 2019Sentence-BERT: Sentence Embeddings using Siamese BERT-Networkscited by 9,170
- 2017Axiomatic Attribution for Deep Networkscited by 3,384
- 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,975
- 2018UMAP: Uniform Manifold Approximation and Projection for Dimension Reductioncited by 2,898
- 2023A Survey on Evaluation of Large Language Modelscited by 1,242
- 2023A Comprehensive Overview of Large Language Modelscited by 648
- 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearningcited by 509
- 2023UltraFeedback: Boosting Language Models with Scaled AI Feedbackcited by 406
- 2023Detecting Pretraining Data from Large Language Modelscited by 387
12 more
- 2023NLP Evaluation in trouble: On the Need to Measure LLM Data Contamination for each Benchmarkcited by 348
- 2023Proving Test Set Contamination in Black Box Language Modelscited by 230
- 2024A Careful Examination of Large Language Model Performance on Grade School Arithmeticcited by 191
- 2023Time Travel in LLMs: Tracing Data Contamination in Large Language Modelscited by 177
- 2023Investigating Data Contamination in Modern Benchmarks for Large Language Modelscited by 138
- 2024When Benchmarks are Targets: Revealing the Sensitivity of Large Language Model Leaderboardscited by 137
- 2024Investigating Data Contamination for Pre-training Language Modelscited by 91
- 2023The Foundation Model Transparency Indexcited by 66
- 2023LatestEval: Addressing Data Contamination in Language Model Evaluation through Dynamic and Time-Sensitive Test Constructioncited by 58
- 2023Goodhart's Law in Reinforcement Learningcited by 41
- 2023Pretraining on the Test Set Is All You Needcited by 33
- 2023On the term "randomization test"cited by 1
Built on by
Citing papers per year: 2024: 1; 2025: 4; 2026: 9.
14 papers.
Sort:
By area:
- 2026AIRS-Bench: a Suite of Tasks for Frontier AI Research Science Agentscited by 38
- 2026Reward Hacking Benchmark: Measuring Exploits in LLM Agents with Tool Usecited by 31
- 2025DarkBench: Benchmarking Dark Patterns in Large Language Modelscited by 28
- 2024Does Data Contamination Detection Work (Well) for LLMs? A Survey and Evaluation on Detection Assumptionscited by 26
- 2025SEA-HELM: Southeast Asian Holistic Evaluation of Language Modelscited by 19
- 2025The Emperor's New Clothes in Benchmarking? A Rigorous Examination of Mitigation Strategies for LLM Benchmark Data Contaminationcited by 15
- 2025Risk Management for Mitigating Benchmark Failure Modes: BenchRiskcited by 3
- 2026Engineering Reliable Coding Agents: Evaluating and Operating the System Around the Modelcited by 3
- 2026Temporal Leakage in LLM Backtesting: Measurement, Validation, and Adjusted Scorescited by 2
- 2026Adversarial Pragmatics for AI Safety Evaluation: A Diagnostic Framework and Seed Benchmark for Language-Mediated Controlcited by 1
- 2026Beyond Success Rate: Cost-Aware Evaluation of Offensive and Defensive Security Agentscited by 1
- 2026Selecting Language Models for Social Science: Start Small, Start Open, and Validatecited by 0
2 more
- 2026The AI Evaluation Ecosystem7 Oct 2026
- 2026Engineering Reliable Coding Agents: Evaluating and Operating the System Around the Model14 Aug 2026
- 2026Temporal Leakage in LLM Backtesting: Measurement, Validation, and Adjusted Scores4 Aug 2026
- 2026Beyond Success Rate: Cost-Aware Evaluation of Offensive and Defensive Security Agents16 Jul 2026
- 2026Adversarial Pragmatics for AI Safety Evaluation: A Diagnostic Framework and Seed Benchmark for Language-Mediated Control1 Jul 2026
- 2026Reward Hacking Benchmark: Measuring Exploits in LLM Agents with Tool Use3 May 2026
- 2026Benchmark Health Index: A Systematic Framework for Benchmarking the Benchmarks of LLMs12 Feb 2026
- 2026AIRS-Bench: a Suite of Tasks for Frontier AI Research Science Agents6 Feb 2026
- 2026Selecting Language Models for Social Science: Start Small, Start Open, and Validate16 Jan 2026
- 2025Risk Management for Mitigating Benchmark Failure Modes: BenchRisk24 Oct 2025
- 2025The Emperor's New Clothes in Benchmarking? A Rigorous Examination of Mitigation Strategies for LLM Benchmark Data Contamination20 Mar 2025
- 2025DarkBench: Benchmarking Dark Patterns in Large Language Models13 Mar 2025
- 2026AIRS-Bench: a Suite of Tasks for Frontier AI Research Science Agentscited by 38
- 2026Reward Hacking Benchmark: Measuring Exploits in LLM Agents with Tool Usecited by 31
- 2026Engineering Reliable Coding Agents: Evaluating and Operating the System Around the Modelcited by 3
- 2026Adversarial Pragmatics for AI Safety Evaluation: A Diagnostic Framework and Seed Benchmark for Language-Mediated Controlcited by 1
- 2026Engineering Reliable Coding Agents: Evaluating and Operating the System Around the Model14 Aug 2026
- 2026Adversarial Pragmatics for AI Safety Evaluation: A Diagnostic Framework and Seed Benchmark for Language-Mediated Control1 Jul 2026
- 2026Reward Hacking Benchmark: Measuring Exploits in LLM Agents with Tool Use3 May 2026
- 2026AIRS-Bench: a Suite of Tasks for Frontier AI Research Science Agents6 Feb 2026
- 2025DarkBench: Benchmarking Dark Patterns in Large Language Modelscited by 28
- 2024Does Data Contamination Detection Work (Well) for LLMs? A Survey and Evaluation on Detection Assumptionscited by 26
- 2025SEA-HELM: Southeast Asian Holistic Evaluation of Language Modelscited by 19
- 2025The Emperor's New Clothes in Benchmarking? A Rigorous Examination of Mitigation Strategies for LLM Benchmark Data Contaminationcited by 15
- 2025Risk Management for Mitigating Benchmark Failure Modes: BenchRiskcited by 3
- 2026Temporal Leakage in LLM Backtesting: Measurement, Validation, and Adjusted Scorescited by 2
- 2026Beyond Success Rate: Cost-Aware Evaluation of Offensive and Defensive Security Agentscited by 1
- 2026Selecting Language Models for Social Science: Start Small, Start Open, and Validatecited by 0
- 2026Benchmark Health Index: A Systematic Framework for Benchmarking the Benchmarks of LLMscited by 0
- 2026The AI Evaluation Ecosystemcited by 0
- 2026The AI Evaluation Ecosystem7 Oct 2026
- 2026Temporal Leakage in LLM Backtesting: Measurement, Validation, and Adjusted Scores4 Aug 2026
- 2026Beyond Success Rate: Cost-Aware Evaluation of Offensive and Defensive Security Agents16 Jul 2026
- 2026Benchmark Health Index: A Systematic Framework for Benchmarking the Benchmarks of LLMs12 Feb 2026
- 2026Selecting Language Models for Social Science: Start Small, Start Open, and Validate16 Jan 2026
- 2025Risk Management for Mitigating Benchmark Failure Modes: BenchRisk24 Oct 2025
- 2025The Emperor's New Clothes in Benchmarking? A Rigorous Examination of Mitigation Strategies for LLM Benchmark Data Contamination20 Mar 2025
- 2025DarkBench: Benchmarking Dark Patterns in Large Language Models13 Mar 2025
- 2025SEA-HELM: Southeast Asian Holistic Evaluation of Language Models20 Feb 2025
- 2024Does Data Contamination Detection Work (Well) for LLMs? A Survey and Evaluation on Detection Assumptions24 Oct 2024