Multi-Agent Risks from Advanced AI
Not on the map. Why?
Cited by 89 in LLM agents and tool use, but placed by its own abstract, which didn’t fit.
Abstract (arXiv)
The rapid development of advanced AI agents and the imminent deployment of many instances of these agents will give rise to multi-agent systems of unprecedented complexity. These systems pose novel and under-explored risks. In this report, we provide a structured taxonomy of these risks by identifying three key failure modes (miscoordination, conflict, and collusion) based on agents' incentives, as well as seven key risk factors (information asymmetries, network effects, selection pressures, destabilising dynamics, commitment problems, emergent agency, and multi-agent security) that can underpin them. We highlight several important instances of each risk, as well as promising directions to help mitigate them. By anchoring our analysis in a range of real-world examples and experimental evidence, we illustrate the distinct challenges posed by multi-agent systems and their implications for the safety, governance, and ethics of advanced AI.
Key facts. Cited by 150 papers in the map (data through 7 Oct 2026). First posted on arXiv 19 Feb 2025.
Builds on
0 of 0 references.
No references here yet.
Built on by
Citing papers per year: 2025: 59; 2026: 91.
150 papers.
Sort:
By area:
- 2025Why Do Multi-Agent LLM Systems Fail?cited by 559
- 2025Survey on Evaluation of LLM-based Agentscited by 190
- 2025AI Agents vs. Agentic AI: A Conceptual Taxonomy, Applications and Challengescited by 167
- 2025Advances and Challenges in Foundation Agents: From Brain-Inspired Intelligence to Evolutionary, Collaborative, and Safe Systemscited by 125
- 2025A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deploymentcited by 110
- 2025A Survey on Trustworthy LLM Agents: Threats and Countermeasurescited by 93
- 2025Open Challenges in Multi-Agent Security: Towards Secure Systems of Interacting AI Agentscited by 66
- 2025A Survey of LLM-Driven AI Agent Communication: Protocols, Security Risks, and Defense Countermeasurescited by 54
- 2025Your Agent May Misevolve: Emergent Risks in Self-evolving LLM Agentscited by 52
- 2025Vibe Coding vs. Agentic Coding: Fundamentals and Practical Implications of Agentic AIcited by 39
- 2025How malicious AI swarms can threaten democracy: The fusion of agentic AI and LLMs marks a new frontier in information warfarecited by 20
- 2025An Economy of AI Agentscited by 17
38 more
- 2025Virtual Agent Economiescited by 17
- 2026Institutional AI: Governing LLM Collusion in Multi-Agent Cournot Markets via Public Governance Graphscited by 17
- 2026Colosseum: Auditing Collusion in Cooperative Multi-Agent Systemscited by 17
- 2025Risk Analysis Techniques for Governed LLM-based Multi-Agent Systemscited by 16
- 2025Group size effects and collective misalignment in LLM multi-agent systemscited by 16
- 2026Intelligent AI Delegationcited by 16
- 2025Magentic Marketplace: An Open-Source Environment for Studying Agentic Marketscited by 15
- 2026CoopEval: Benchmarking Cooperation-Sustaining Mechanisms and LLM Agents in Social Dilemmascited by 14
- 2025FAIRGAME: a Framework for AI Agents Bias Recognition using Game Theorycited by 13
- 2025Inherent and emergent liability issues in LLM-based agentic systems: a principal-agent perspectivecited by 12
- 2025Must Read: A Comprehensive Survey of Computational Persuasioncited by 12
- 2025Seven Security Challenges in Cross-domain Multi-agent LLM Systemscited by 12
- 2025A Pragmatic View of AI Personhoodcited by 12
- 2026MoltNet: Understanding Social Behavior of AI Agents in the Agent-Native MoltBookcited by 12
- 2025Media and responsible AI governance: a game-theoretic and LLM analysiscited by 11
- 2025Do LLMs trust AI regulation? Emerging behaviour of game-theoretic LLM agentscited by 11
- 2025Evaluating LLM Agent Collusion in Double Auctionscited by 11
- 2025Understanding LLM Agent Behaviours via Game Theory: Strategy Recognition, Biases and Multi-Agent Dynamicscited by 11
- 2026AdaMem: Adaptive User-Centric Memory for Long-Horizon Dialogue Agentscited by 11
- 2025Beyond Static Responses: Multi-Agent LLM Systems as a New Paradigm for Social Science Researchcited by 9
- 2025The Singapore Consensus on Global AI Safety Research Prioritiescited by 9
- 2025LLM Applications: Current Paradigms and the Next Frontiercited by 8
- 2025Detecting Silent Failures in Multi-Agentic AI Trajectoriescited by 8
- 2025Distributional AGI Safetycited by 8
- 2026OMNI-LEAK: Orchestrator Multi-Agent Network Induced Data Leakagecited by 7
- 2026Thought Virus: Viral Misalignment via Subliminal Prompting in Multi-Agent Systemscited by 7
- 2026How are AI agents used? Evidence from 177,000 MCP toolscited by 7
- 2025E2Edev: Benchmarking Large Language Models in End-to-End Software Development Taskcited by 6
- 2026Generative AI collective behavior needs an interactionist paradigmcited by 6
- 2026Evaluating Collective Behaviour of Hundreds of LLM Agentscited by 6
- 2026Detecting Multi-Agent Collusion Through Multi-Agent Interpretabilitycited by 6
- 2025Spore in the Wild: A Case Study of Spore.fun as an Open-Environment Evolution Experiment with Sovereign AI Agents on TEE-Secured Blockchainscited by 5
- 2025Agent-to-Agent Theory of Mind: Testing Interlocutor Awareness among Large Language Modelscited by 5
- 2025Formalizing the Safety, Security, and Functional Properties of Agentic AI Systemscited by 5
- 2025Evaluating LLMs in Open-Source Gamescited by 5
- 2026Measuring Weak-to-Strong Legibility of Reasoning Modelscited by 5
- 2025Shapley Machine: A Game-Theoretic Framework for N-Agent Ad Hoc Teamworkcited by 4
- 2025Everyone Contributes! Incentivizing Strategic Cooperation in Multi-LLM Systems via Sequential Public Goods Gamescited by 4
50 most cited of 150 All 150 (JSON)
- 2026Ecology of AI Agents: Collaboration Creates a Population Threshold for Takeoff8 Oct 2026
- 2026Covert Assistance: Helpful LLM Agents Evade Oversight in Multi-Agent Systems30 Sep 2026
- 2026Learning to Harvest Without Collapse in a Regenerative Commons: A Lagrangian Framework29 Sep 2026
- 2026Persistent Partners Raise Prices Among Learning Agents28 Sep 2026
- 2026Financial Fragility in Societies of LLM Agents: Coordination Failures and Stabilizing Mechanisms25 Sep 2026
- 2026How does Adversarial Influence Scale in Multi-Agent Systems?24 Sep 2026
- 2026Indirect tipping: a social attack surface in AI agent populations21 Sep 2026
- 2026Emergent Collusion in Long-Horizon LLM Agent Interaction21 Sep 2026
- 2026Beyond Predictable Paths: Redefining AI Security Incident Reporting for Agents21 Sep 2026
- 2026From Certain Doom to Survival: Agent-Driven Self-Governance in LLM Agent Societies18 Sep 2026
- 2026Xeno-Interpretability: Investigating the Alien Minds of LLMs17 Sep 2026
- 2026Emergence World: Adversarial Stress-Testing of Long-Horizon Multi-Agent Systems15 Sep 2026
38 more
- 2026Mapping U.S. Federal AI Governance Against Sector Vulnerability14 Sep 2026
- 2026Copying explains the collective behavior of AI agents in the wild8 Sep 2026
- 2026Your Agent Says Yes: Interpreting Adversarial Market Behavior Beyond Individual Transactions7 Sep 2026
- 2026Norms at a Price: Why RL-Based Alignment Can Promise Conditional Compliance at Best7 Sep 2026
- 2026Counter-Swarm Doctrine: Containing Coordinated Agent Intrusions5 Sep 2026
- 2026Moral Competence Before Moral Content: Why LLM Agents Lack the Prerequisites for Coherent Alignment4 Sep 2026
- 2026DCFA: Dual-view Causal-inspired Attribution for Failure Reasoning in LLM-based Multi-agent Systems4 Sep 2026
- 2026Inferred Generative-Process Diversity Predicts Correlated Failure Across Language Models3 Sep 2026
- 2026SoK: When Safe Agents Fail Together: The Security of Multi Agent LLM Systems1 Sep 2026
- 2026Forgotten in Weights, Recovered by Tools: Agentic Tool Unlearning for LLM Agents21 Aug 2026
- 2026Testing and Evaluation of Agentic AI Systems In Military Command and Control20 Aug 2026
- 2026Agent Behavioral Contracts II: Certifying Compositional Reliability Without Assuming Independence13 Aug 2026
- 2026Mind Viruses: Self-Propagating Ideas in Multi-Agent LLM Systems10 Aug 2026
- 2026Unaccountable Delegation, Fading Skills: Mapping the Risks of Workplace AI Agents9 Aug 2026
- 2026CyberAGENTS: Structured Autonomy for Agentic Gamified Learning in Cybersecurity8 Aug 2026
- 2026Agents Catching Agents: Shortcut Cascades and Benchmark Gaming in Clinical Multi-Agent Systems4 Aug 2026
- 2026Steganalysis of Adaptive Covert Collusion in Tool-Using Agent Populations: A Black-Box, Cross-Principal Approach3 Aug 2026
- 2026State-dependent error correlations shape voting thresholds in committees of AI agents27 Jul 2026
- 2026Draining the Energy Commons: Self-Defeating Over-Appropriation as a Coordination Failure in Agentic LLM Collectives24 Jul 2026
- 2026Commitment To Cooperation With Self-Negotiated Contracts23 Jul 2026
- 2026Harnessing Disagreement: Detecting Correlated Agreement Blindness in Multi-Agent Triage22 Jul 2026
- 2026Institutional Red-Teaming: Deployment Rules, Not Just Models, Causally Shape Multi-Agent AI Safety8 Jul 2026
- 2026Norm Enforcement for AI Agents: Robustly Shaping Behavior in Multi-Agent Systems7 Jul 2026
- 2026Security and Privacy in Agentic AI: Grand Challenges and Future Directions7 Jul 2026
- 2026Information Limits and Attractor Dynamics in Economies of Frontier LLM Agents: A Pre-Registered Test7 Jul 2026
- 2026GBC: Gradient-Based Connections for Optimizing Multi-Agent Systems26 Jun 2026
- 2026When Passing Tests Hides Vulnerabilities: An Empirical Study of Silent Failures in Agentic Systems25 Jun 2026
- 2026Group Selection Promotes Prosocial Prompts in Populations of LLM Agents22 Jun 2026
- 2026Grounded Scaling: Why Agentic AI Needs Deterministic Environments21 Jun 2026
- 2026MAStrike: Shapley-Guided Collusive Red-Teaming on Multi-Agent Systems11 Jun 2026
- 2026AI Researchers Must Help Lead Arms Control to Mitigate Military AI Risks10 Jun 2026
- 2026The Agentic Web Requires New Normative Infrastructure9 Jun 2026
- 2026AI Assurance in UK Defence: Challenges in Operationalising JSP 9368 Jun 2026
- 2026A Note on the Strategic Confinement Problem7 Jun 2026
- 2026Benchmarking Open-Ended Multi-Agent Coordination in Language Agents6 Jun 2026
- 2026Representational Similarity and Model Behavior in Multi-Agent Interaction5 Jun 2026
- 2026Dynamic Coordination Strategy Selection for Enterprise Multi-Agent Systems30 May 2026
- 2026Dissociative Identity: Language Model Agents Lack Grounding for Reputation Mechanisms28 May 2026
50 newest of 150 All 150 (JSON)
- 2025Why Do Multi-Agent LLM Systems Fail?cited by 559
- 2025Survey on Evaluation of LLM-based Agentscited by 190
- 2025AI Agents vs. Agentic AI: A Conceptual Taxonomy, Applications and Challengescited by 167
- 2025Advances and Challenges in Foundation Agents: From Brain-Inspired Intelligence to Evolutionary, Collaborative, and Safe Systemscited by 125
- 2025A Survey on Trustworthy LLM Agents: Threats and Countermeasurescited by 93
- 2025A Survey of LLM-Driven AI Agent Communication: Protocols, Security Risks, and Defense Countermeasurescited by 54
- 2025Your Agent May Misevolve: Emergent Risks in Self-evolving LLM Agentscited by 52
- 2025Vibe Coding vs. Agentic Coding: Fundamentals and Practical Implications of Agentic AIcited by 39
- 2025How malicious AI swarms can threaten democracy: The fusion of agentic AI and LLMs marks a new frontier in information warfarecited by 20
- 2026Institutional AI: Governing LLM Collusion in Multi-Agent Cournot Markets via Public Governance Graphscited by 17
- 2026Colosseum: Auditing Collusion in Cooperative Multi-Agent Systemscited by 17
- 2025Risk Analysis Techniques for Governed LLM-based Multi-Agent Systemscited by 16
12 most cited of 85 All 85 (JSON)
- 2026Covert Assistance: Helpful LLM Agents Evade Oversight in Multi-Agent Systems30 Sep 2026
- 2026Financial Fragility in Societies of LLM Agents: Coordination Failures and Stabilizing Mechanisms25 Sep 2026
- 2026Indirect tipping: a social attack surface in AI agent populations21 Sep 2026
- 2026Emergent Collusion in Long-Horizon LLM Agent Interaction21 Sep 2026
- 2026From Certain Doom to Survival: Agent-Driven Self-Governance in LLM Agent Societies18 Sep 2026
- 2026Emergence World: Adversarial Stress-Testing of Long-Horizon Multi-Agent Systems15 Sep 2026
- 2026Moral Competence Before Moral Content: Why LLM Agents Lack the Prerequisites for Coherent Alignment4 Sep 2026
- 2026SoK: When Safe Agents Fail Together: The Security of Multi Agent LLM Systems1 Sep 2026
- 2026Forgotten in Weights, Recovered by Tools: Agentic Tool Unlearning for LLM Agents21 Aug 2026
- 2026Testing and Evaluation of Agentic AI Systems In Military Command and Control20 Aug 2026
- 2026Agent Behavioral Contracts II: Certifying Compositional Reliability Without Assuming Independence13 Aug 2026
- 2026Mind Viruses: Self-Propagating Ideas in Multi-Agent LLM Systems10 Aug 2026
12 newest of 85 All 85 (JSON)
- 2025A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deploymentcited by 110
- 2026CoopEval: Benchmarking Cooperation-Sustaining Mechanisms and LLM Agents in Social Dilemmascited by 14
- 2026Thought Virus: Viral Misalignment via Subliminal Prompting in Multi-Agent Systemscited by 7
- 2026Measuring Weak-to-Strong Legibility of Reasoning Modelscited by 5
- 2026DCFA: Dual-view Causal-inspired Attribution for Failure Reasoning in LLM-based Multi-agent Systemscited by 1
- 2026DCFA: Dual-view Causal-inspired Attribution for Failure Reasoning in LLM-based Multi-agent Systems4 Sep 2026
- 2026CoopEval: Benchmarking Cooperation-Sustaining Mechanisms and LLM Agents in Social Dilemmas16 Apr 2026
- 2026Measuring Weak-to-Strong Legibility of Reasoning Models20 Mar 2026
- 2026Thought Virus: Viral Misalignment via Subliminal Prompting in Multi-Agent Systems23 Feb 2026
- 2025A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deployment22 Apr 2025
- 2025An Economy of AI Agentscited by 17
- 2025Virtual Agent Economiescited by 17
- 2026Intelligent AI Delegationcited by 16
- 2025Must Read: A Comprehensive Survey of Computational Persuasioncited by 12
- 2026MoltNet: Understanding Social Behavior of AI Agents in the Agent-Native MoltBookcited by 12
- 2025Media and responsible AI governance: a game-theoretic and LLM analysiscited by 11
- 2025The Singapore Consensus on Global AI Safety Research Prioritiescited by 9
- 2025Distributional AGI Safetycited by 8
- 2025E2Edev: Benchmarking Large Language Models in End-to-End Software Development Taskcited by 6
- 2026Generative AI collective behavior needs an interactionist paradigmcited by 6
- 2025Spore in the Wild: A Case Study of Spore.fun as an Open-Environment Evolution Experiment with Sovereign AI Agents on TEE-Secured Blockchainscited by 5
- 2025Evaluating LLMs in Open-Source Gamescited by 5
12 most cited of 57 All 57 (JSON)
- 2026Ecology of AI Agents: Collaboration Creates a Population Threshold for Takeoff8 Oct 2026
- 2026Learning to Harvest Without Collapse in a Regenerative Commons: A Lagrangian Framework29 Sep 2026
- 2026Persistent Partners Raise Prices Among Learning Agents28 Sep 2026
- 2026How does Adversarial Influence Scale in Multi-Agent Systems?24 Sep 2026
- 2026Beyond Predictable Paths: Redefining AI Security Incident Reporting for Agents21 Sep 2026
- 2026Xeno-Interpretability: Investigating the Alien Minds of LLMs17 Sep 2026
- 2026Mapping U.S. Federal AI Governance Against Sector Vulnerability14 Sep 2026
- 2026Copying explains the collective behavior of AI agents in the wild8 Sep 2026
- 2026Your Agent Says Yes: Interpreting Adversarial Market Behavior Beyond Individual Transactions7 Sep 2026
- 2026Norms at a Price: Why RL-Based Alignment Can Promise Conditional Compliance at Best7 Sep 2026
- 2026Counter-Swarm Doctrine: Containing Coordinated Agent Intrusions5 Sep 2026
- 2026Inferred Generative-Process Diversity Predicts Correlated Failure Across Language Models3 Sep 2026
12 newest of 57 All 57 (JSON)