HateBench: Benchmarking Hate Speech Detectors on LLM-Generated Content and Hate Campaigns
Not on the map. Why?
Abstract (arXiv)
Large Language Models (LLMs) have raised increasing concerns about their misuse in generating hate speech. Among all the efforts to address this issue, hate speech detectors play a crucial role. However, the effectiveness of different detectors against LLM-generated hate speech remains largely unknown. In this paper, we propose HateBench, a framework for benchmarking hate speech detectors on LLM-generated hate speech. We first construct a hate speech dataset of 7,838 samples generated by six widely-used LLMs covering 34 identity groups, with meticulous annotations by three labelers. We then assess the effectiveness of eight representative hate speech detectors on the LLM-generated dataset. Our results show that while detectors are generally effective in identifying LLM-generated hate speech, their performance degrades with newer versions of LLMs. We also reveal the potential of LLM-driven hate campaigns, a new threat that LLMs bring to the field of hate speech detection. By leveraging advanced techniques like adversarial attacks and model stealing attacks, the adversary can intentionally evade the detector and automate hate campaigns online. The most potent adversarial attack achieves an attack success rate of 0.966, and its attack efficiency can be further improved by 13-21× through model stealing attacks with acceptable attack performance. We hope our study can serve as a call to action for the research community and platform moderators to fortify defenses against these emerging threats.
Key facts. Cited by 14 papers in the map (data through 14 Oct 2026). Builds on 42 of its 79 references that are in the map. First posted on arXiv 28 Jan 2025.
Builds on
42 of 79 references.
References · 42
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,399
- 2023GPT-4 Technical Reportcited by 18,396
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 14,132
- 2019RoBERTa: A Robustly Optimized BERT Pretraining Approachcited by 13,372
- 2022OPT: Open Pre-trained Transformer Language Modelscited by 3,512
- 2019Is BERT Really Robust? A Strong Baseline for Natural Language Attack on Text Classification and Entailmentcited by 671
- 2023Baichuan 2: Open Large-scale Language Modelscited by 670
- 2016Stealing Machine Learning Models via Prediction APIscited by 619
- 2023"Do Anything Now": Characterizing and Evaluating In-The-Wild Jailbreak Prompts on Large Language Modelscited by 489
- 2020HateXplain: A Benchmark Dataset for Explainable Hate Speech Detectioncited by 407
- 2019Nuanced Metrics for Measuring Unintended Bias with Real Data for Text Classificationcited by 404
- 2018TextBugger: Generating Adversarial Text Against Real-world Applicationscited by 381
30 more
- 2023Toxicity in ChatGPT: Analyzing Persona-assigned Language Modelscited by 360
- 2022A Holistic Approach to Undesired Content Detection in the Real Worldcited by 356
- 2018Black-box Generation of Adversarial Text Sequences to Evade Deep Learning Classifierscited by 345
- 2018Adversarial Example Generation with Syntactically Controlled Paraphrase Networkscited by 286
- 2020Learning from the Worst: Dynamically Generated Datasets to Improve Online Hate Detectioncited by 221
- 2020HateCheck: Functional Tests for Hate Speech Detection Modelscited by 216
- 2019High Accuracy and High Fidelity Extraction of Neural Networkscited by 214
- 2017Generating Natural Adversarial Examplescited by 183
- 2021Challenges in Detoxifying Language Modelscited by 169
- 2019Thieves on Sesame Street! Model Extraction of BERT-based APIscited by 139
- 2017Deceiving Google's Perspective API Built for Detecting Toxic Commentscited by 102
- 2020OpenAttack: An Open-source Textual Adversarial Attack Toolkitcited by 84
- 2022I Know What You Trained Last Summer: A Survey on Stealing Machine Learning Models and Defencescited by 75
- 2024UnsafeBench: Benchmarking Image Safety Classifiers on Real-World and AI-Generated Imagescited by 53
- 2021Hatemoji: A Test Suite and Adversarially-Generated Dataset for Benchmarking and Detecting Emoji-based Hatecited by 50
- 2021Model Stealing Attacks Against Inductive Graph Neural Networkscited by 50
- 2016Analyzing the Targets of Hate in Online Social Mediacited by 49
- 2022Large-Scale Hate Speech Detection with Cross-Domain Transfercited by 41
- 2023Robust Hate Speech Detection in Social Media: A Cross-Dataset Empirical Evaluationcited by 28
- 2023Moderating New Waves of Online Hate with Chain-of-Thought Reasoning in Large Language Modelscited by 18
- 2021Fight Fire with Fire: Fine-tuning Hate Detectors using Large Samples of Generated Hate Speechcited by 13
- 2022On Xing Tian and the Perseverance of Anti-China Sentiment Onlinecited by 10
- 2023Hate Raids on Twitch: Echoes of the Past, New Modalities, and Implications for Platform Governancecited by 7
- 2024Image-Perfect Imperfections: Safety, Bias, and Authenticity in the Shadow of Text-To-Image Model Evolutioncited by 7
- 2021TweetBLM: A Hate Speech Dataset and Analysis of Black Lives Matter-related Microblogs on Twittercited by 4
- 2023SecurityNet: Assessing Machine Learning Vulnerabilities on Public Modelscited by 4
- 2023No Easy Way Out: the Effectiveness of Deplatforming an Extremist Forum to Suppress Hate and Harassmentcited by 3
- 2022Not All Asians are the Same: A Disaggregated Approach to Identifying Anti-Asian Racism in Social Mediacited by 2
- 2023"There's so much responsibility on users right now:" Expert Advice for Staying Safer From Hate and Harassmentcited by 2
- 2023TUBERAIDER: Attributing Coordinated Hate Attacks on YouTube Videos to their Source Communitiescited by 1
Built on by
Citing papers per year: 2025: 9; 2026: 5.
14 papers.
Sort:
By area:
- 2025GuidedBench: Measuring and Mitigating the Evaluation Discrepancies of In-the-wild LLM Jailbreak Methodscited by 12
- 2025Peering Behind the Shield: Guardrail Identification in Large Language Modelscited by 5
- 2025Echoes of Power: Investigating Geopolitical Bias in US and China Large Language Modelscited by 5
- 2025Bridging the Gap in Vision Language Models in Identifying Unsafe Concepts Across Modalitiescited by 4
- 2025Toxicity in Online Platforms and AI Systems: A Survey of Needs, Challenges, Mitigations, and Future Directionscited by 3
- 2025ModelCitizens: Representing Community Voices in Online Safetycited by 1
- 2025Can LLMs Threaten Human Survival? Benchmarking Potential Existential Threats from LLMs via Prefix Completioncited by 1
- 2026SpatialJB: How Text Distribution Art Becomes the "Jailbreak Key" for LLM Guardrailscited by 1
- 2026Hide&Seek: Remove Image Watermarks with Negligible Cost via Pixel-wise Reconstructioncited by 1
- 2025LAMP: Extracting Local Decision Surfaces From Large Language Modelscited by 0
- 2025Are Today's LLMs Ready to Explain Well-Being Concepts?cited by 0
- 2026When Surface Form Changes Moderation Decisions: A Paired Study of Code-Mixed Workflow Instabilitycited by 0
- 2026To Jev or Not? Evaluating the Accuracy and Efficiency of Structured Decision Models for Hate-Speech Moderation2 Oct 2026
- 2026What the Eyes See, the LLMs Miss: Exploiting Human Perception for Adversarial Text Attacks8 Jun 2026
- 2026When Surface Form Changes Moderation Decisions: A Paired Study of Code-Mixed Workflow Instability4 Jun 2026
- 2026Hide&Seek: Remove Image Watermarks with Negligible Cost via Pixel-wise Reconstruction1 Mar 2026
- 2026SpatialJB: How Text Distribution Art Becomes the "Jailbreak Key" for LLM Guardrails14 Jan 2026
- 2025Can LLMs Threaten Human Survival? Benchmarking Potential Existential Threats from LLMs via Prefix Completion24 Nov 2025
- 2025Toxicity in Online Platforms and AI Systems: A Survey of Needs, Challenges, Mitigations, and Future Directions29 Sep 2025
- 2025Are Today's LLMs Ready to Explain Well-Being Concepts?6 Aug 2025
- 2025Bridging the Gap in Vision Language Models in Identifying Unsafe Concepts Across Modalities15 Jul 2025
- 2025ModelCitizens: Representing Community Voices in Online Safety7 Jul 2025
- 2025LAMP: Extracting Local Decision Surfaces From Large Language Models17 May 2025
- 2025Echoes of Power: Investigating Geopolitical Bias in US and China Large Language Models20 Mar 2025
- 2025GuidedBench: Measuring and Mitigating the Evaluation Discrepancies of In-the-wild LLM Jailbreak Methodscited by 12
- 2025Peering Behind the Shield: Guardrail Identification in Large Language Modelscited by 5
- 2025Can LLMs Threaten Human Survival? Benchmarking Potential Existential Threats from LLMs via Prefix Completioncited by 1
- 2026SpatialJB: How Text Distribution Art Becomes the "Jailbreak Key" for LLM Guardrailscited by 1
- 2026SpatialJB: How Text Distribution Art Becomes the "Jailbreak Key" for LLM Guardrails14 Jan 2026
- 2025Can LLMs Threaten Human Survival? Benchmarking Potential Existential Threats from LLMs via Prefix Completion24 Nov 2025
- 2025GuidedBench: Measuring and Mitigating the Evaluation Discrepancies of In-the-wild LLM Jailbreak Methods24 Feb 2025
- 2025Peering Behind the Shield: Guardrail Identification in Large Language Models3 Feb 2025
- 2025Are Today's LLMs Ready to Explain Well-Being Concepts?cited by 0
- 2025Are Today's LLMs Ready to Explain Well-Being Concepts?6 Aug 2025
- 2025Echoes of Power: Investigating Geopolitical Bias in US and China Large Language Modelscited by 5
- 2025Toxicity in Online Platforms and AI Systems: A Survey of Needs, Challenges, Mitigations, and Future Directionscited by 3
- 2025ModelCitizens: Representing Community Voices in Online Safetycited by 1
- 2026Hide&Seek: Remove Image Watermarks with Negligible Cost via Pixel-wise Reconstructioncited by 1
- 2025LAMP: Extracting Local Decision Surfaces From Large Language Modelscited by 0
- 2026When Surface Form Changes Moderation Decisions: A Paired Study of Code-Mixed Workflow Instabilitycited by 0
- 2026What the Eyes See, the LLMs Miss: Exploiting Human Perception for Adversarial Text Attackscited by 0
- 2026To Jev or Not? Evaluating the Accuracy and Efficiency of Structured Decision Models for Hate-Speech Moderationcited by 0
- 2026To Jev or Not? Evaluating the Accuracy and Efficiency of Structured Decision Models for Hate-Speech Moderation2 Oct 2026
- 2026What the Eyes See, the LLMs Miss: Exploiting Human Perception for Adversarial Text Attacks8 Jun 2026
- 2026When Surface Form Changes Moderation Decisions: A Paired Study of Code-Mixed Workflow Instability4 Jun 2026
- 2026Hide&Seek: Remove Image Watermarks with Negligible Cost via Pixel-wise Reconstruction1 Mar 2026
- 2025Toxicity in Online Platforms and AI Systems: A Survey of Needs, Challenges, Mitigations, and Future Directions29 Sep 2025
- 2025ModelCitizens: Representing Community Voices in Online Safety7 Jul 2025
- 2025LAMP: Extracting Local Decision Surfaces From Large Language Models17 May 2025
- 2025Echoes of Power: Investigating Geopolitical Bias in US and China Large Language Models20 Mar 2025
Similar, not cited
Close in wording, no citation either way
- 2023Probing LLMs for hate speech detection: strengths and vulnerabilities
- 2025HatePrototypes: Interpretable and Transferable Representations for Implicit and Explicit Hate Speech Detection
- 2026From Specialization to Generalization: Instruction-tuned LLMs for Robust Harmful Content Mitigation
- 2023HateRephrase: Zero- and Few-Shot Reduction of Hate Intensity in Online Posts using Large Language Models
- 2024Decoding Hate: Exploring Language Models' Reactions to Hate Speech
- 2025RV-HATE: Reinforced Multi-Module Voting for Implicit Hate Speech Detection
- 2023Revisiting Hate Speech Benchmarks: From Data Curation to System Deployment
- 2025Rethinking Hate Speech Detection on Social Media: Can LLMs Replace Traditional Models?