Evaluation data contamination in LLMs: how do we measure it and (when) does it matter?
Not on the map. Why?
Abstract (arXiv)
Hampering the interpretation of benchmark scores, evaluation data contamination has become a growing concern in the evaluation of LLMs, and an active area of research studies its effects. While evaluation data contamination is easily understood intuitively, it is surprisingly difficult to define precisely which samples should be considered contaminated and, consequently, how it impacts benchmark scores. We propose that these questions should be addressed together and that contamination metrics can be assessed based on whether models benefit from the examples they mark contaminated. We propose a novel analysis method called ConTAM, and show with a large scale survey of existing and novel n-gram based contamination metrics across 13 benchmarks and 7 models from 2 different families that ConTAM can be used to better understand evaluation data contamination and its effects. We find that contamination may have a much larger effect than reported in recent LLM releases and benefits models differently at different scales. We also find that considering only the longest contaminated substring provides a better signal than considering a union of all contaminated substrings, and that doing model and benchmark specific threshold analysis greatly increases the specificity of the results. Lastly, we investigate the impact of hyperparameter choices, finding that, among other things, both using larger values of n and disregarding matches that are infrequent in the pre-training data lead to many false negatives. With ConTAM, we provide a method to empirically ground evaluation data contamination metrics in downstream effects. With our exploration, we shed light on how evaluation data contamination can impact LLMs and provide insight into the considerations important when doing contamination analysis. We end our paper by discussing these in more detail and providing concrete suggestions for future work.
Key facts. Cited by 32 papers in the map (data through 14 Oct 2026). Builds on 28 of its 40 references that are in the map. First posted on arXiv 6 Nov 2024.
Builds on
28 of 40 references.
References · 28
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 14,132
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
- 2021Training Verifiers to Solve Math Word Problemscited by 10,109
- 2021Measuring Mathematical Problem Solving With the MATH Datasetcited by 5,371
- 2022PaLM: Scaling Language Modeling with Pathwayscited by 5,326
- 2019HellaSwag: Can a Machine Really Finish Your Sentence?cited by 4,100
- 2021Finetuned Language Models Are Zero-Shot Learnerscited by 3,780
- 2021Program Synthesis with Large Language Modelscited by 3,637
- 2017TriviaQA: A Large Scale Distantly Supervised Challenge Dataset for Reading Comprehensioncited by 2,955
- 2019PIQA: Reasoning about Physical Commonsense in Natural Languagecited by 2,883
- 2022Beyond the Imitation Game: Quantifying and extrapolating the capabilities of language modelscited by 1,998
16 more
- 2022Challenging BIG-Bench Tasks and Whether Chain-of-Thought Can Solve Themcited by 1,807
- 2023Pythia: A Suite for Analyzing Large Language Models Across Training and Scalingcited by 1,786
- 2024The FineWeb Datasets: Decanting the Web for the Finest Text Data at Scalecited by 1,160
- 2021GLaM: Efficient Scaling of Language Models with Mixture-of-Expertscited by 897
- 2024Dolma: an Open Corpus of Three Trillion Tokens for Language Model Pretraining Researchcited by 483
- 2023NLP Evaluation in trouble: On the Need to Measure LLM Data Contamination for each Benchmarkcited by 348
- 2023Proving Test Set Contamination in Black Box Language Modelscited by 230
- 2024Leak, Cheat, Repeat: Data Contamination and Evaluation Malpractices in Closed-Source LLMscited by 229
- 2023Rethinking Benchmark and Contamination for Language Models with Rephrased Samplescited by 195
- 2022Quantifying Privacy Risks of Masked Language Models Using Membership Inference Attackscited by 175
- 2024LAB-Bench: Measuring Capabilities of Language Models for Biology Researchcited by 156
- 2023Stop Uploading Test Data in Plain Text: Practical Strategies for Mitigating Data Contamination by Evaluation Benchmarkscited by 142
- 2023What's In My Big Data?cited by 129
- 2024Investigating Data Contamination for Pre-training Language Modelscited by 91
- 2023WorldSense: A Synthetic Benchmark for Grounded Reasoning in Large Language Modelscited by 20
- 2024Data Contamination Report from the 2024 CONDA Shared Taskcited by 20
Built on by
Citing papers per year: 2024: 2; 2025: 13; 2026: 17.
32 papers.
Sort:
By area:
- 2024Tulu 3: Pushing Frontiers in Open Language Model Post-Trainingcited by 1,053
- 2025Reinforcement Learning from Human Feedbackcited by 58
- 2025CodeI/O: Condensing Reasoning Patterns via Code Input-Output Predictioncited by 55
- 2024HARP: A challenging human-annotated math reasoning benchmarkcited by 27
- 2025Language Models May Verbatim Complete Text They Were Not Explicitly Trained Oncited by 21
- 2025Overestimation in LLM Evaluation: A Controlled Large-Scale Study on Data Contamination's Impact on Machine Translationcited by 13
- 2025LLM Knowledge is Brittle: Truthfulness Representations Rely on Superficial Resemblancecited by 9
- 2025STAMP Your Content: Proving Dataset Membership via Watermarked Rephrasingscited by 8
- 2025Detecting Data Contamination in LLMs via In-Context Learningcited by 8
- 2025Detecting Benchmark Contamination Through Watermarkingcited by 6
- 2025Evaluating the Robustness of Large Language Model Safety Guardrails Against Adversarial Attackscited by 5
- 2026The Impact of Post-training on Data Contaminationcited by 5
20 more
- 2026Scaling Large Reasoning Models beyond Human Supervision: A Path toward Superintelligencecited by 5
- 2025Data-Centric Lessons To Improve Speech-Language Pretrainingcited by 3
- 2025Theory-Grounded Evaluation of Human-Like Fallacy Patterns in LLM Reasoningcited by 2
- 2026LLM Benchmark Datasets Should Be Contamination-Resistantcited by 2
- 2026Temporal Leakage in LLM Backtesting: Measurement, Validation, and Adjusted Scorescited by 2
- 2025Two Causally Related Needles in a Video Haystackcited by 1
- 2026Obscuring Data Contamination Through Translation: Evidence from Arabic Corporacited by 1
- 2026Benchmarking at the Edge of Comprehensioncited by 1
- 2026QuickScope: Certifying Hard Questions in Dynamic LLM Benchmarkscited by 1
- 2026Measuring AI Reasoning: A Guide for Researcherscited by 1
- 2026Same Question, Different Answers: Evaluating LLM Reliability Beyond Accuracycited by 1
- 2025LLMs for Resource Allocation: A Participatory Budgeting Approach to Inferring Preferencescited by 0
- 2026How Much Reasoning Do Retrieval-Augmented Models Add beyond LLMs? A Benchmarking Framework for Multi-Hop Inference over Hybrid Knowledgecited by 0
- 2026Learning to Detect Language Model Training Data via Active Reconstructioncited by 0
- 2026Are Large Language Models Truly Smarter Than Humans?cited by 0
- 2026Physics-R1: An Audited Olympiad Corpus and Released Verifiers for Visual Physics Reasoningcited by 0
- 2026Anchored or Drifting: What Recursive Self-Generation Reveals About Training Datacited by 0
- 2026LeakScale: Estimating the Causal Effect of Benchmark Exposurecited by 0
- 2026Benchmarking Prompt Optimization of Large Language Models With Chesscited by 0
- 2026Query Your Way Out: Benchmarking Multi-Turn Knowledge Reasoning through Generalized Puzzle Solvingcited by 0
- 2026Query Your Way Out: Benchmarking Multi-Turn Knowledge Reasoning through Generalized Puzzle Solving12 Oct 2026
- 2026Benchmarking Prompt Optimization of Large Language Models With Chess30 Sep 2026
- 2026LeakScale: Estimating the Causal Effect of Benchmark Exposure23 Sep 2026
- 2026Scaling Large Reasoning Models beyond Human Supervision: A Path toward Superintelligence31 Aug 2026
- 2026Temporal Leakage in LLM Backtesting: Measurement, Validation, and Adjusted Scores4 Aug 2026
- 2026Anchored or Drifting: What Recursive Self-Generation Reveals About Training Data30 Jun 2026
- 2026LLM Benchmark Datasets Should Be Contamination-Resistant19 May 2026
- 2026Same Question, Different Answers: Evaluating LLM Reliability Beyond Accuracy18 May 2026
- 2026Physics-R1: An Audited Olympiad Corpus and Released Verifiers for Visual Physics Reasoning13 May 2026
- 2026Measuring AI Reasoning: A Guide for Researchers4 May 2026
- 2026QuickScope: Certifying Hard Questions in Dynamic LLM Benchmarks20 Apr 2026
- 2026Are Large Language Models Truly Smarter Than Humans?17 Mar 2026
20 more
- 2026Learning to Detect Language Model Training Data via Active Reconstruction22 Feb 2026
- 2026Benchmarking at the Edge of Comprehension15 Feb 2026
- 2026How Much Reasoning Do Retrieval-Augmented Models Add beyond LLMs? A Benchmarking Framework for Multi-Hop Inference over Hybrid Knowledge10 Feb 2026
- 2026Obscuring Data Contamination Through Translation: Evidence from Arabic Corpora21 Jan 2026
- 2026The Impact of Post-training on Data Contamination3 Jan 2026
- 2025Evaluating the Robustness of Large Language Model Safety Guardrails Against Adversarial Attacks27 Nov 2025
- 2025Detecting Data Contamination in LLMs via In-Context Learning30 Oct 2025
- 2025Data-Centric Lessons To Improve Speech-Language Pretraining22 Oct 2025
- 2025LLM Knowledge is Brittle: Truthfulness Representations Rely on Superficial Resemblance13 Oct 2025
- 2025LLMs for Resource Allocation: A Participatory Budgeting Approach to Inferring Preferences8 Aug 2025
- 2025Theory-Grounded Evaluation of Human-Like Fallacy Patterns in LLM Reasoning10 Jun 2025
- 2025Two Causally Related Needles in a Video Haystack26 May 2025
- 2025STAMP Your Content: Proving Dataset Membership via Watermarked Rephrasings18 Apr 2025
- 2025Reinforcement Learning from Human Feedback16 Apr 2025
- 2025Language Models May Verbatim Complete Text They Were Not Explicitly Trained On21 Mar 2025
- 2025Detecting Benchmark Contamination Through Watermarking24 Feb 2025
- 2025CodeI/O: Condensing Reasoning Patterns via Code Input-Output Prediction11 Feb 2025
- 2025Overestimation in LLM Evaluation: A Controlled Large-Scale Study on Data Contamination's Impact on Machine Translation30 Jan 2025
- 2024HARP: A challenging human-annotated math reasoning benchmark11 Dec 2024
- 2024Tulu 3: Pushing Frontiers in Open Language Model Post-Training22 Nov 2024
- 2024Tulu 3: Pushing Frontiers in Open Language Model Post-Trainingcited by 1,053
- 2025CodeI/O: Condensing Reasoning Patterns via Code Input-Output Predictioncited by 55
- 2024HARP: A challenging human-annotated math reasoning benchmarkcited by 27
- 2026The Impact of Post-training on Data Contaminationcited by 5
- 2026Scaling Large Reasoning Models beyond Human Supervision: A Path toward Superintelligencecited by 5
- 2025Theory-Grounded Evaluation of Human-Like Fallacy Patterns in LLM Reasoningcited by 2
- 2026Measuring AI Reasoning: A Guide for Researcherscited by 1
- 2026How Much Reasoning Do Retrieval-Augmented Models Add beyond LLMs? A Benchmarking Framework for Multi-Hop Inference over Hybrid Knowledgecited by 0
- 2026Query Your Way Out: Benchmarking Multi-Turn Knowledge Reasoning through Generalized Puzzle Solvingcited by 0
- 2026Query Your Way Out: Benchmarking Multi-Turn Knowledge Reasoning through Generalized Puzzle Solving12 Oct 2026
- 2026Scaling Large Reasoning Models beyond Human Supervision: A Path toward Superintelligence31 Aug 2026
- 2026Measuring AI Reasoning: A Guide for Researchers4 May 2026
- 2026How Much Reasoning Do Retrieval-Augmented Models Add beyond LLMs? A Benchmarking Framework for Multi-Hop Inference over Hybrid Knowledge10 Feb 2026
- 2026The Impact of Post-training on Data Contamination3 Jan 2026
- 2025Theory-Grounded Evaluation of Human-Like Fallacy Patterns in LLM Reasoning10 Jun 2025
- 2025CodeI/O: Condensing Reasoning Patterns via Code Input-Output Prediction11 Feb 2025
- 2024HARP: A challenging human-annotated math reasoning benchmark11 Dec 2024
- 2024Tulu 3: Pushing Frontiers in Open Language Model Post-Training22 Nov 2024
- 2025Reinforcement Learning from Human Feedbackcited by 58
- 2025Reinforcement Learning from Human Feedback16 Apr 2025
- 2025Language Models May Verbatim Complete Text They Were Not Explicitly Trained Oncited by 21
- 2025Overestimation in LLM Evaluation: A Controlled Large-Scale Study on Data Contamination's Impact on Machine Translationcited by 13
- 2025LLM Knowledge is Brittle: Truthfulness Representations Rely on Superficial Resemblancecited by 9
- 2025STAMP Your Content: Proving Dataset Membership via Watermarked Rephrasingscited by 8
- 2025Detecting Data Contamination in LLMs via In-Context Learningcited by 8
- 2025Detecting Benchmark Contamination Through Watermarkingcited by 6
- 2025Data-Centric Lessons To Improve Speech-Language Pretrainingcited by 3
- 2026LLM Benchmark Datasets Should Be Contamination-Resistantcited by 2
- 2026Temporal Leakage in LLM Backtesting: Measurement, Validation, and Adjusted Scorescited by 2
- 2025Two Causally Related Needles in a Video Haystackcited by 1
- 2026Obscuring Data Contamination Through Translation: Evidence from Arabic Corporacited by 1
- 2026Benchmarking at the Edge of Comprehensioncited by 1
12 most cited of 20 All 20 (JSON)
- 2026Benchmarking Prompt Optimization of Large Language Models With Chess30 Sep 2026
- 2026LeakScale: Estimating the Causal Effect of Benchmark Exposure23 Sep 2026
- 2026Temporal Leakage in LLM Backtesting: Measurement, Validation, and Adjusted Scores4 Aug 2026
- 2026Anchored or Drifting: What Recursive Self-Generation Reveals About Training Data30 Jun 2026
- 2026LLM Benchmark Datasets Should Be Contamination-Resistant19 May 2026
- 2026Same Question, Different Answers: Evaluating LLM Reliability Beyond Accuracy18 May 2026
- 2026Physics-R1: An Audited Olympiad Corpus and Released Verifiers for Visual Physics Reasoning13 May 2026
- 2026QuickScope: Certifying Hard Questions in Dynamic LLM Benchmarks20 Apr 2026
- 2026Are Large Language Models Truly Smarter Than Humans?17 Mar 2026
- 2026Benchmarking at the Edge of Comprehension15 Feb 2026
- 2026Obscuring Data Contamination Through Translation: Evidence from Arabic Corpora21 Jan 2026
- 2025Detecting Data Contamination in LLMs via In-Context Learning30 Oct 2025
12 newest of 20 All 20 (JSON)