A Survey on Data Contamination for Large Language Models
Not on the map. Why?
Abstract (arXiv)
Recent advancements in Large Language Models (LLMs) have demonstrated significant progress in various areas, such as text generation and code synthesis. However, the reliability of performance evaluation has come under scrutiny due to data contamination-the unintended overlap between training and test datasets. This overlap has the potential to artificially inflate model performance, as LLMs are typically trained on extensive datasets scraped from publicly available sources. These datasets often inadvertently overlap with the benchmarks used for evaluation, leading to an overestimation of the models' true generalization capabilities. In this paper, we first examine the definition and impacts of data contamination. Secondly, we review methods for contamination-free evaluation, focusing on three strategies: data updating-based methods, data rewriting-based methods, and prevention-based methods. Specifically, we highlight dynamic benchmarks and LLM-driven evaluation methods. Finally, we categorize contamination detecting methods based on model information dependency: white-Box, gray-Box, and black-Box detection approaches. Our survey highlights the requirements for more rigorous evaluation protocols and proposes future directions for addressing data contamination challenges.
Key facts. Cited by 35 papers in the map (data through 14 Oct 2026). Builds on 45 of its 60 references that are in the map. First posted on arXiv 20 Feb 2025.
Builds on
45 of 60 references.
References · 45
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2019Sentence-BERT: Sentence Embeddings using Siamese BERT-Networkscited by 9,170
- 2020Extracting Training Data from Large Language Modelscited by 2,189
- 2024LiveCodeBench: Holistic and Contamination Free Evaluation of Large Language Models for Codecited by 2,004
- 2022Knowledge Unlearning for Mitigating Privacy Risks in Language Modelscited by 437
- 2023Who's Harry Potter? Approximate Unlearning in LLMscited by 381
- 2023NLP Evaluation in trouble: On the Need to Measure LLM Data Contamination for each Benchmarkcited by 348
- 2024Leak, Cheat, Repeat: Data Contamination and Evaluation Malpractices in Closed-Source LLMscited by 229
- 2022Will we run out of data? Limits of LLM scaling based on human-generated datacited by 195
- 2023Rethinking Benchmark and Contamination for Language Models with Rephrased Samplescited by 195
- 2024A Careful Examination of Large Language Model Performance on Grade School Arithmeticcited by 191
- 2023Benchmarking Foundation Models with Language-Model-as-an-Examinercited by 172
33 more
- 2023Platypus: Quick, Cheap, and Powerful Refinement of LLMscited by 150
- 2024Benchmark Data Contamination of Large Language Models: A Surveycited by 147
- 2023Speak, Memory: An Archaeology of Books Known to ChatGPT/GPT-4cited by 125
- 2025Preference Leakage: A Contamination Problem in LLM-as-a-judgecited by 125
- 2023DyVal: Dynamic Evaluation of Large Language Models for Reasoning Taskscited by 101
- 2023Task Contamination: Language Models May Not Be Few-Shot Anymorecited by 99
- 2024Rethinking LLM Memorization through the Lens of Adversarial Compressioncited by 94
- 2024Investigating Data Contamination for Pre-training Language Modelscited by 91
- 2024Functional Benchmarks for Robust Evaluation of Reasoning Performance, and the Reasoning Gapcited by 79
- 2024Benchmark Self-Evolving: A Multi-Agent Framework for Dynamic LLM Evaluationcited by 75
- 2024DE-COP: Detecting Copyrighted Content in Language Models Training Datacited by 74
- 2024EvoCodeBench: An Evolving Code Generation Benchmark Aligned with Real-World Code Repositoriescited by 72
- 2021Memorization vs. Generalization: Quantifying Data Leakage in NLP Performance Evaluationcited by 70
- 2024Quantifying Contamination in Evaluating Code Generation Capabilities of Language Modelscited by 65
- 2023LatestEval: Addressing Data Contamination in Language Model Evaluation through Dynamic and Time-Sensitive Test Constructioncited by 58
- 2024Pretraining Data Detection for Large Language Models: A Divergence-based Calibration Methodcited by 55
- 2024UnUnlearning: Unlearning is not sufficient for content regulation in advanced generative AIcited by 51
- 2023Estimating Contamination via Perplexity: Quantifying Memorisation in Language Model Evaluationcited by 48
- 2024MMLU-CF: A Contamination-free Multi-task Language Understanding Benchmarkcited by 41
- 2024KIEval: A Knowledge-grounded Interactive Evaluation Framework for Large Language Modelscited by 36
- 2024Evading Data Contamination Detection for Language Models is (too) Easycited by 30
- 2024Unveiling the Spectrum of Data Contamination in Language Models: A Survey from Detection to Remediationcited by 30
- 2024VarBench: Robust Language Model Benchmarking Through Dynamic Variable Perturbationcited by 29
- 2024Data Contamination Can Cross Language Barrierscited by 26
- 2024DARG: Dynamic Evaluation of Large Language Models via Adaptive Reasoning Graphcited by 26
- 2024Does Data Contamination Detection Work (Well) for LLMs? A Survey and Evaluation on Detection Assumptionscited by 26
- 2024Data Contamination Calibration for Black-box LLMscited by 24
- 2024Investigating the Impact of Data Contamination of Large Language Models in Text-to-SQL Translationcited by 21
- 2024Elephants Never Forget: Testing Language Models for Memorization of Tabular Datacited by 19
- 2024Inference-Time Decontamination: Reusing Leaked Benchmarks for Large Language Model Evaluationcited by 19
- 2024TreeEval: Benchmark-Free Evaluation of Large Language Models through Tree Planningcited by 14
- 2024Concerned with Data Contamination? Assessing Countermeasures in Code Language Modelcited by 14
- 2024DICE: Detecting In-distribution Contamination in LLM's Fine-tuning Phase for Math Reasoningcited by 11
Built on by
Citing papers per year: 2025: 11; 2026: 24.
35 papers.
Sort:
By area:
- 2025SWE-Bench Pro: Can AI Agents Solve Long-Horizon Software Engineering Tasks?cited by 279
- 2025Winning Gold at IMO 2025 with a Model-Agnostic Verification-and-Refinement Pipelinecited by 82
- 2025Search Arena: Analyzing Search-Augmented LLMscited by 34
- 2025LastingBench: Defend Benchmarks Against Knowledge Leakagecited by 14
- 2025Confidence in Large Language Model Evaluation: A Bayesian Approach to Limited-Sample Challengescited by 8
- 2025A validity-guided workflow for robust large language model research in psychologycited by 8
- 2025BeyondBench: Contamination-Resistant Evaluation of Reasoning in Language Modelscited by 8
- 2026ClawEnvKit: Automatic Environment Generation for Claw-Like Agentscited by 8
- 2026The Impact of Post-training on Data Contaminationcited by 5
- 2025Where Did It Go Wrong? Attributing Undesirable LLM Behaviors via Representation Gradient Tracingcited by 4
- 2025MatQnA: A Benchmark Dataset for Multi-modal Large Language Models in Materials Characterization and Analysiscited by 3
- 2025When Large Language Models Know the Table: A Framework for Assessing Data Contamination in Tabular Datasetscited by 3
23 more
- 2026In-Context Molecular Property Prediction with LLMs: A Blinding Study on Memorization and Knowledge Conflictscited by 3
- 2026The Illusion of Reasoning: Exposing Evasive Data Contamination in LLMs via Zero-CoT Truncationcited by 3
- 2025DynaSolidGeo: A Dynamic Benchmark for Genuine Spatial Mathematical Reasoning of VLMs in Solid Geometrycited by 1
- 2026DVD: A Robust Method for Detecting Variant Contamination in Large Language Model Evaluationcited by 1
- 2026Measuring AI Reasoning: A Guide for Researcherscited by 1
- 2026TEMPO: Temporal Enforcement via Mode-Separated Policy Optimization for Trustworthy LLM Backtestingcited by 1
- 2026TRACER: A Semantic-Aware Framework for Fine-Grained Contamination Detection in Code LLMscited by 1
- 2026Pretraining Data Exposure in Large Language Models: A Survey of Membership Inference, Data Contamination, and Security Implicationscited by 1
- 2026How Do Language Models Understand Tables? A Mechanistic Analysis of Cell Locationcited by 0
- 2026When AI Navigates the Fog of Warcited by 0
- 2026DepthCharge: A Domain-Agnostic Framework for Measuring Depth-Dependent Knowledge in Large Language Modelscited by 0
- 2026RoMathExam: A Longitudinal Dataset of Romanian Math Exams (1895-2025) with a Seven-Decade Core (1957-2025)cited by 0
- 2026Fine-Grained Benchmark Generation for Comprehensive Evaluation of Foundation Modelscited by 0
- 2026Provable Joint Decontamination for Benchmarking Multiple Large Language Modelscited by 0
- 2026Rethinking Molecular Text Representations for LLMs: An Empirical Studycited by 0
- 2026Power Systems Agent Benchmark: Executable Evaluation of AI Agents in Electric Power Engineeringcited by 0
- 2026To Reason or to Fabricate: Reasoning Without Shortcuts via Hint-Anchored Pairwise Aggregationcited by 0
- 2026EvalSafetyGap: A Hybrid Survey and Conceptual Framework for LLM Evaluation-Safety Failurescited by 0
- 2026The Illusion of Agentic Complexity in README.md Generation: Evaluating Single-Agent vs. Multi-Agent RAG Systemscited by 0
- 2026Don't Let Me Ask for It: LLMs Show Deficiencies in Active Multi-Turn Information Acquisition for Abductive Inferencecited by 0
- 2026Detecting Pretraining Data in Large Language Models from a Free-Energy Perspectivecited by 0
- 2026Enhancing Assessment of Self-Consistency in LLM Explanations using Perturbation Strengthcited by 0
- 2026MetaBench-Harness: Unlocking End-to-End Optimization of Benchmark Harnessescited by 0
- 2026MetaBench-Harness: Unlocking End-to-End Optimization of Benchmark Harnesses27 Sep 2026
- 2026Enhancing Assessment of Self-Consistency in LLM Explanations using Perturbation Strength25 Sep 2026
- 2026Detecting Pretraining Data in Large Language Models from a Free-Energy Perspective18 Sep 2026
- 2026Don't Let Me Ask for It: LLMs Show Deficiencies in Active Multi-Turn Information Acquisition for Abductive Inference4 Aug 2026
- 2026The Illusion of Agentic Complexity in README.md Generation: Evaluating Single-Agent vs. Multi-Agent RAG Systems29 Jun 2026
- 2026EvalSafetyGap: A Hybrid Survey and Conceptual Framework for LLM Evaluation-Safety Failures29 Jun 2026
- 2026To Reason or to Fabricate: Reasoning Without Shortcuts via Hint-Anchored Pairwise Aggregation28 Jun 2026
- 2026Power Systems Agent Benchmark: Executable Evaluation of AI Agents in Electric Power Engineering18 Jun 2026
- 2026Rethinking Molecular Text Representations for LLMs: An Empirical Study2 Jun 2026
- 2026TRACER: A Semantic-Aware Framework for Fine-Grained Contamination Detection in Code LLMs22 May 2026
- 2026Pretraining Data Exposure in Large Language Models: A Survey of Membership Inference, Data Contamination, and Security Implications21 May 2026
- 2026The Illusion of Reasoning: Exposing Evasive Data Contamination in LLMs via Zero-CoT Truncation21 May 2026
23 more
- 2026Provable Joint Decontamination for Benchmarking Multiple Large Language Models20 May 2026
- 2026TEMPO: Temporal Enforcement via Mode-Separated Policy Optimization for Trustworthy LLM Backtesting13 May 2026
- 2026Fine-Grained Benchmark Generation for Comprehensive Evaluation of Foundation Models12 May 2026
- 2026Measuring AI Reasoning: A Guide for Researchers4 May 2026
- 2026ClawEnvKit: Automatic Environment Generation for Claw-Like Agents20 Apr 2026
- 2026RoMathExam: A Longitudinal Dataset of Romanian Math Exams (1895-2025) with a Seven-Decade Core (1957-2025)28 Mar 2026
- 2026In-Context Molecular Property Prediction with LLMs: A Blinding Study on Memorization and Knowledge Conflicts26 Mar 2026
- 2026When AI Navigates the Fog of War17 Mar 2026
- 2026DepthCharge: A Domain-Agnostic Framework for Measuring Depth-Dependent Knowledge in Large Language Models5 Mar 2026
- 2026How Do Language Models Understand Tables? A Mechanistic Analysis of Cell Location9 Feb 2026
- 2026DVD: A Robust Method for Detecting Variant Contamination in Large Language Model Evaluation8 Jan 2026
- 2026The Impact of Post-training on Data Contamination3 Jan 2026
- 2025DynaSolidGeo: A Dynamic Benchmark for Genuine Spatial Mathematical Reasoning of VLMs in Solid Geometry25 Oct 2025
- 2025When Large Language Models Know the Table: A Framework for Assessing Data Contamination in Tabular Datasets23 Oct 2025
- 2025BeyondBench: Contamination-Resistant Evaluation of Reasoning in Language Models29 Sep 2025
- 2025Where Did It Go Wrong? Attributing Undesirable LLM Behaviors via Representation Gradient Tracing26 Sep 2025
- 2025SWE-Bench Pro: Can AI Agents Solve Long-Horizon Software Engineering Tasks?21 Sep 2025
- 2025MatQnA: A Benchmark Dataset for Multi-modal Large Language Models in Materials Characterization and Analysis14 Sep 2025
- 2025Winning Gold at IMO 2025 with a Model-Agnostic Verification-and-Refinement Pipeline21 Jul 2025
- 2025A validity-guided workflow for robust large language model research in psychology6 Jul 2025
- 2025LastingBench: Defend Benchmarks Against Knowledge Leakage21 Jun 2025
- 2025Search Arena: Analyzing Search-Augmented LLMs5 Jun 2025
- 2025Confidence in Large Language Model Evaluation: A Bayesian Approach to Limited-Sample Challenges30 Apr 2025
- 2025BeyondBench: Contamination-Resistant Evaluation of Reasoning in Language Modelscited by 8
- 2026The Impact of Post-training on Data Contaminationcited by 5
- 2026The Illusion of Reasoning: Exposing Evasive Data Contamination in LLMs via Zero-CoT Truncationcited by 3
- 2025DynaSolidGeo: A Dynamic Benchmark for Genuine Spatial Mathematical Reasoning of VLMs in Solid Geometrycited by 1
- 2026Measuring AI Reasoning: A Guide for Researcherscited by 1
- 2026TEMPO: Temporal Enforcement via Mode-Separated Policy Optimization for Trustworthy LLM Backtestingcited by 1
- 2026Rethinking Molecular Text Representations for LLMs: An Empirical Studycited by 0
- 2026To Reason or to Fabricate: Reasoning Without Shortcuts via Hint-Anchored Pairwise Aggregationcited by 0
- 2026Don't Let Me Ask for It: LLMs Show Deficiencies in Active Multi-Turn Information Acquisition for Abductive Inferencecited by 0
- 2026Enhancing Assessment of Self-Consistency in LLM Explanations using Perturbation Strengthcited by 0
- 2026Enhancing Assessment of Self-Consistency in LLM Explanations using Perturbation Strength25 Sep 2026
- 2026Don't Let Me Ask for It: LLMs Show Deficiencies in Active Multi-Turn Information Acquisition for Abductive Inference4 Aug 2026
- 2026To Reason or to Fabricate: Reasoning Without Shortcuts via Hint-Anchored Pairwise Aggregation28 Jun 2026
- 2026Rethinking Molecular Text Representations for LLMs: An Empirical Study2 Jun 2026
- 2026The Illusion of Reasoning: Exposing Evasive Data Contamination in LLMs via Zero-CoT Truncation21 May 2026
- 2026TEMPO: Temporal Enforcement via Mode-Separated Policy Optimization for Trustworthy LLM Backtesting13 May 2026
- 2026Measuring AI Reasoning: A Guide for Researchers4 May 2026
- 2026The Impact of Post-training on Data Contamination3 Jan 2026
- 2025DynaSolidGeo: A Dynamic Benchmark for Genuine Spatial Mathematical Reasoning of VLMs in Solid Geometry25 Oct 2025
- 2025BeyondBench: Contamination-Resistant Evaluation of Reasoning in Language Models29 Sep 2025
- 2025SWE-Bench Pro: Can AI Agents Solve Long-Horizon Software Engineering Tasks?cited by 279
- 2025Winning Gold at IMO 2025 with a Model-Agnostic Verification-and-Refinement Pipelinecited by 82
- 2025Search Arena: Analyzing Search-Augmented LLMscited by 34
- 2025LastingBench: Defend Benchmarks Against Knowledge Leakagecited by 14
- 2025Confidence in Large Language Model Evaluation: A Bayesian Approach to Limited-Sample Challengescited by 8
- 2025A validity-guided workflow for robust large language model research in psychologycited by 8
- 2026ClawEnvKit: Automatic Environment Generation for Claw-Like Agentscited by 8
- 2025When Large Language Models Know the Table: A Framework for Assessing Data Contamination in Tabular Datasetscited by 3
- 2026In-Context Molecular Property Prediction with LLMs: A Blinding Study on Memorization and Knowledge Conflictscited by 3
- 2026DVD: A Robust Method for Detecting Variant Contamination in Large Language Model Evaluationcited by 1
- 2026TRACER: A Semantic-Aware Framework for Fine-Grained Contamination Detection in Code LLMscited by 1
- 2026How Do Language Models Understand Tables? A Mechanistic Analysis of Cell Locationcited by 0
12 most cited of 21 All 21 (JSON)
- 2026MetaBench-Harness: Unlocking End-to-End Optimization of Benchmark Harnesses27 Sep 2026
- 2026Detecting Pretraining Data in Large Language Models from a Free-Energy Perspective18 Sep 2026
- 2026EvalSafetyGap: A Hybrid Survey and Conceptual Framework for LLM Evaluation-Safety Failures29 Jun 2026
- 2026Power Systems Agent Benchmark: Executable Evaluation of AI Agents in Electric Power Engineering18 Jun 2026
- 2026TRACER: A Semantic-Aware Framework for Fine-Grained Contamination Detection in Code LLMs22 May 2026
- 2026Provable Joint Decontamination for Benchmarking Multiple Large Language Models20 May 2026
- 2026Fine-Grained Benchmark Generation for Comprehensive Evaluation of Foundation Models12 May 2026
- 2026ClawEnvKit: Automatic Environment Generation for Claw-Like Agents20 Apr 2026
- 2026RoMathExam: A Longitudinal Dataset of Romanian Math Exams (1895-2025) with a Seven-Decade Core (1957-2025)28 Mar 2026
- 2026In-Context Molecular Property Prediction with LLMs: A Blinding Study on Memorization and Knowledge Conflicts26 Mar 2026
- 2026When AI Navigates the Fog of War17 Mar 2026
- 2026DepthCharge: A Domain-Agnostic Framework for Measuring Depth-Dependent Knowledge in Large Language Models5 Mar 2026
12 newest of 21 All 21 (JSON)