The Vulnerability of Language Model Benchmarks: Do They Accurately Reflect True LLM Performance?
Not on the map. Why?
Abstract (arXiv)
The pursuit of leaderboard rankings in Large Language Models (LLMs) has created a fundamental paradox: models excel at standardized tests while failing to demonstrate genuine language understanding and adaptability. Our systematic analysis of NLP evaluation frameworks reveals pervasive vulnerabilities across the evaluation spectrum, from basic metrics to complex benchmarks like GLUE and MMLU. These vulnerabilities manifest through benchmark exploitation, dataset contamination, and evaluation bias, creating a false perception of progress in language understanding capabilities. Through extensive review of contemporary evaluation approaches, we identify significant limitations in static benchmark designs, human evaluation protocols, and LLM-as-judge frameworks, all of which compromise the reliability of current performance assessments. As LLM capabilities evolve and existing benchmarks become redundant, we lay the groundwork for new evaluation methods that resist manipulation, minimize data contamination, and assess domain-specific tasks. This requires frameworks that are adapted dynamically, addressing current limitations and providing a more accurate reflection of LLM performance.
Key facts. Cited by 22 papers in the map (data through 7 Oct 2026). Builds on 35 of its 53 references that are in the map. First posted on arXiv 2 Dec 2024.
Builds on
35 of 53 references.
References · 35
- 2017Attention Is All You Needcited by 59,932
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 13,958
- 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,393
- 2020Measuring Massive Multitask Language Understandingcited by 7,768
- 2018GLUE: A Multi-Task Benchmark and Analysis Platform for Natural Language Understandingcited by 4,854
- 2019HellaSwag: Can a Machine Really Finish Your Sentence?cited by 4,018
- 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,919
- 2017A Broad-Coverage Challenge Corpus for Sentence Understanding through Inferencecited by 2,665
- 2020Extracting Training Data from Large Language Modelscited by 2,144
- 2022Beyond the Imitation Game: Quantifying and extrapolating the capabilities of language modelscited by 1,970
23 more
- 2019SuperGLUE: A Stickier Benchmark for General-Purpose Language Understanding Systemscited by 1,718
- 2018Know What You Don't Know: Unanswerable Questions for SQuADcited by 1,538
- 2024Chatbot Arena: An Open Platform for Evaluating LLMs by Human Preferencecited by 1,151
- 2016The LAMBADA dataset: Word prediction requiring a broad discourse contextcited by 960
- 2019Adversarial Examples Are Not Bugs, They Are Featurescited by 950
- 2024Length-Controlled AlpacaEval: A Simple Way to Debias Automatic Evaluatorscited by 865
- 2018The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networkscited by 847
- 2023Can Large Language Models Be an Alternative to Human Evaluations?cited by 729
- 2019Universal Adversarial Triggers for Attacking and Analyzing NLPcited by 709
- 2018Annotation Artifacts in Natural Language Inference Datacited by 656
- 2021Documenting Large Webtext Corpora: A Case Study on the Colossal Clean Crawled Corpuscited by 481
- 2019Learning the Difference that Makes a Difference with Counterfactually-Augmented Datacited by 428
- 2018Generating Natural Language Adversarial Examplescited by 422
- 2017Men Also Like Shopping: Reducing Gender Bias Amplification using Corpus-level Constraintscited by 420
- 2021All That's 'Human' Is Not Gold: Evaluating Human Evaluation of Generated Textcited by 287
- 2019FreeLB: Enhanced Adversarial Training for Natural Language Understandingcited by 261
- 2023Proving Test Set Contamination in Black Box Language Modelscited by 227
- 2024Leak, Cheat, Repeat: Data Contamination and Evaluation Malpractices in Closed-Source LLMscited by 224
- 2021What Will it Take to Fix Benchmarking in Natural Language Understanding?cited by 200
- 2024When Benchmarks are Targets: Revealing the Sensitivity of Large Language Model Leaderboardscited by 134
- 2024Efficient Adversarial Training in LLMs with Continuous Attackscited by 104
- 2019Instance adaptive adversarial training: Improved accuracy tradeoffs in neural netscited by 55
- 2022How many perturbations break this model? Evaluating robustness beyond adversarial accuracycited by 9
Built on by
Citing papers per year: 2025: 13; 2026: 9.
22 papers.
Sort:
By area:
- 2025The Landscape of Agentic Reinforcement Learning for LLMs: A Surveycited by 195
- 2025A Framework for Benchmarking and Aligning Task-Planning Safety in LLM-Based Embodied Agentscited by 27
- 2026Noisy but Valid: Robust Statistical Evaluation of LLMs with Imperfect Judgescited by 23
- 2025From Prompts to Power: Measuring the Energy Footprint of LLM Inferencecited by 12
- 2025The Inadequacy of Offline LLM Evaluations: A Need to Account for Personalization in Model Behaviorcited by 8
- 2025Deceive, Detect, and Disclose: Large Language Models Play Mini-Mafiacited by 7
- 2025Benchmark Profiling: Mechanistic Diagnosis of LLM Benchmarkscited by 5
- 2025CoreEval: Automatically Building Contamination-Resilient Datasets with Real-World Knowledge toward Reliable LLM Evaluationcited by 3
- 2025LLMEval-Fair: A Large-Scale Longitudinal Study on Robust and Fair Evaluation of Large Language Modelscited by 2
- 2025Is General-Purpose AI Reasoning Sensitive to Data-Induced Cognitive Biases? Dynamic Benchmarking on Typical Software Engineering Dilemmascited by 2
- 2025Risk Management for Mitigating Benchmark Failure Modes: BenchRiskcited by 2
- 2025MACEval: A Multi-Agent Continual Evaluation Network for Large Modelscited by 2
10 more
- 2025Three tiers of computation in transformers and in brain architecturescited by 1
- 2025Rethinking the Understanding Ability across LLMs through Mutual Informationcited by 1
- 2026RBCorr: Response Bias Correction in Language Modelscited by 1
- 2026SEAR: Schema-Based Evaluation and Routing for LLM Gatewayscited by 1
- 2026What Current AI Benchmarks Leave Unmeasured: Modality, Search, Citations, and Implications (for Safety Evaluations)cited by 1
- 2026Robust LLM Performance Certification via Constrained Maximum Likelihood Estimationcited by 0
- 2026Empirical Evidence of Complexity-Induced Limits in Large Language Models on Finite Discrete State-Space Problems with Explicit Validity Constraintscited by 0
- 2026Training a General Purpose Automated Red Teaming Modelcited by 0
- 2026The Shibboleth Effect: Auditing the Cross-Lingual Distributional Skew of Large Language Modelscited by 0
- 2026Auditing MCQA Benchmarks through Probability Landscapescited by 0
- 2026Auditing MCQA Benchmarks through Probability Landscapes31 Aug 2026
- 2026What Current AI Benchmarks Leave Unmeasured: Modality, Search, Citations, and Implications (for Safety Evaluations)6 Aug 2026
- 2026The Shibboleth Effect: Auditing the Cross-Lingual Distributional Skew of Large Language Models9 Jun 2026
- 2026Training a General Purpose Automated Red Teaming Model24 Apr 2026
- 2026Empirical Evidence of Complexity-Induced Limits in Large Language Models on Finite Discrete State-Space Problems with Explicit Validity Constraints15 Apr 2026
- 2026SEAR: Schema-Based Evaluation and Routing for LLM Gateways20 Mar 2026
- 2026Robust LLM Performance Certification via Constrained Maximum Likelihood Estimation11 Mar 2026
- 2026RBCorr: Response Bias Correction in Language Models12 Feb 2026
- 2026Noisy but Valid: Robust Statistical Evaluation of LLMs with Imperfect Judges28 Jan 2026
- 2025CoreEval: Automatically Building Contamination-Resilient Datasets with Real-World Knowledge toward Reliable LLM Evaluation24 Nov 2025
- 2025MACEval: A Multi-Agent Continual Evaluation Network for Large Models12 Nov 2025
- 2025From Prompts to Power: Measuring the Energy Footprint of LLM Inference5 Nov 2025
10 more
- 2025Risk Management for Mitigating Benchmark Failure Modes: BenchRisk24 Oct 2025
- 2025Deceive, Detect, and Disclose: Large Language Models Play Mini-Mafia27 Sep 2025
- 2025Benchmark Profiling: Mechanistic Diagnosis of LLM Benchmarks23 Sep 2025
- 2025The Inadequacy of Offline LLM Evaluations: A Need to Account for Personalization in Model Behavior18 Sep 2025
- 2025The Landscape of Agentic Reinforcement Learning for LLMs: A Survey2 Sep 2025
- 2025Is General-Purpose AI Reasoning Sensitive to Data-Induced Cognitive Biases? Dynamic Benchmarking on Typical Software Engineering Dilemmas15 Aug 2025
- 2025LLMEval-Fair: A Large-Scale Longitudinal Study on Robust and Fair Evaluation of Large Language Models7 Aug 2025
- 2025Rethinking the Understanding Ability across LLMs through Mutual Information25 May 2025
- 2025A Framework for Benchmarking and Aligning Task-Planning Safety in LLM-Based Embodied Agents20 Apr 2025
- 2025Three tiers of computation in transformers and in brain architectures5 Mar 2025
- 2025Rethinking the Understanding Ability across LLMs through Mutual Informationcited by 1
- 2026Empirical Evidence of Complexity-Induced Limits in Large Language Models on Finite Discrete State-Space Problems with Explicit Validity Constraintscited by 0
- 2026The Shibboleth Effect: Auditing the Cross-Lingual Distributional Skew of Large Language Modelscited by 0
- 2026The Shibboleth Effect: Auditing the Cross-Lingual Distributional Skew of Large Language Models9 Jun 2026
- 2026Empirical Evidence of Complexity-Induced Limits in Large Language Models on Finite Discrete State-Space Problems with Explicit Validity Constraints15 Apr 2026
- 2025Rethinking the Understanding Ability across LLMs through Mutual Information25 May 2025
- 2026Training a General Purpose Automated Red Teaming Modelcited by 0
- 2026Training a General Purpose Automated Red Teaming Model24 Apr 2026
- 2026Noisy but Valid: Robust Statistical Evaluation of LLMs with Imperfect Judgescited by 23
- 2025From Prompts to Power: Measuring the Energy Footprint of LLM Inferencecited by 12
- 2025The Inadequacy of Offline LLM Evaluations: A Need to Account for Personalization in Model Behaviorcited by 8
- 2025Deceive, Detect, and Disclose: Large Language Models Play Mini-Mafiacited by 7
- 2025Benchmark Profiling: Mechanistic Diagnosis of LLM Benchmarkscited by 5
- 2025CoreEval: Automatically Building Contamination-Resilient Datasets with Real-World Knowledge toward Reliable LLM Evaluationcited by 3
- 2025LLMEval-Fair: A Large-Scale Longitudinal Study on Robust and Fair Evaluation of Large Language Modelscited by 2
- 2025Is General-Purpose AI Reasoning Sensitive to Data-Induced Cognitive Biases? Dynamic Benchmarking on Typical Software Engineering Dilemmascited by 2
- 2025Risk Management for Mitigating Benchmark Failure Modes: BenchRiskcited by 2
- 2025MACEval: A Multi-Agent Continual Evaluation Network for Large Modelscited by 2
- 2025Three tiers of computation in transformers and in brain architecturescited by 1
- 2026RBCorr: Response Bias Correction in Language Modelscited by 1
12 most cited of 16 All 16 (JSON)
- 2026Auditing MCQA Benchmarks through Probability Landscapes31 Aug 2026
- 2026What Current AI Benchmarks Leave Unmeasured: Modality, Search, Citations, and Implications (for Safety Evaluations)6 Aug 2026
- 2026SEAR: Schema-Based Evaluation and Routing for LLM Gateways20 Mar 2026
- 2026Robust LLM Performance Certification via Constrained Maximum Likelihood Estimation11 Mar 2026
- 2026RBCorr: Response Bias Correction in Language Models12 Feb 2026
- 2026Noisy but Valid: Robust Statistical Evaluation of LLMs with Imperfect Judges28 Jan 2026
- 2025CoreEval: Automatically Building Contamination-Resilient Datasets with Real-World Knowledge toward Reliable LLM Evaluation24 Nov 2025
- 2025MACEval: A Multi-Agent Continual Evaluation Network for Large Models12 Nov 2025
- 2025From Prompts to Power: Measuring the Energy Footprint of LLM Inference5 Nov 2025
- 2025Risk Management for Mitigating Benchmark Failure Modes: BenchRisk24 Oct 2025
- 2025Deceive, Detect, and Disclose: Large Language Models Play Mini-Mafia27 Sep 2025
- 2025Benchmark Profiling: Mechanistic Diagnosis of LLM Benchmarks23 Sep 2025
12 newest of 16 All 16 (JSON)