Standard Benchmarks Fail -- Auditing LLM Agents in Finance Must Prioritize Risk
On the map: LLM agents and tool use → Financial trading and forecasting agents
Abstract (arXiv)
Standard benchmarks fixate on how well large language model (LLM) agents perform in finance, yet say little about whether they are safe to deploy. We argue that accuracy metrics and return-based scores provide an illusion of reliability, overlooking vulnerabilities such as hallucinated facts, stale data, and adversarial prompt manipulation. We take a firm position: financial LLM agents should be evaluated first and foremost on their risk profile, not on their point-estimate performance. Drawing on risk-engineering principles, we outline a three-level agenda: model, workflow, and system, for stress-testing LLM agents under realistic failure modes. To illustrate why this shift is urgent, we audit six API-based and open-weights LLM agents on three high-impact tasks and uncover hidden weaknesses that conventional benchmarks miss. We conclude with actionable recommendations for researchers, practitioners, and regulators: audit risk-aware metrics in future studies, publish stress scenarios alongside datasets, and treat ``safety budget'' as a primary success criterion. Only by redefining what ``good'' looks like can the community responsibly advance AI-driven finance.
Key facts. Cited by 13 papers in the map (data through 7 Oct 2026). Placed in Financial trading and forecasting agents, one of 16 directions in LLM agents and tool use. Builds on 77 of its 119 references that are in the map. First posted on arXiv 21 Feb 2025.
Builds on
77 of 119 references.
Closest ancestors · 6
Same direction, newest first
- 2024TradingAgents: Multi-Agents LLM Financial Trading Framework28 Dec
- 2024INVESTORBENCH: A Benchmark for Financial Decision-Making Tasks with LLM-based Agent24 Dec
- 2024Enhancing Financial Question Answering with a Multi-Agent Reflection Framework29 Oct
- 2024Large Language Model Agent in Financial Trading: A Survey26 Jul
- 2024Simulating Financial Market via Large Language Model based Agents28 Jun
- 2024FinRobot: An Open-Source AI Agent Platform for Financial Applications using Large Language Models23 May
Other references · 71
- 2023GPT-4 Technical Reportcited by 18,132
- 2022Training language models to follow instructions with human feedbackcited by 15,712
- 2024The Llama 3 Herd of Modelscited by 14,192
- 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,302
- 2022ReAct: Synergizing Reasoning and Acting in Language Modelscited by 8,355
- 2025DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learningcited by 6,146
- 2018GLUE: A Multi-Task Benchmark and Analysis Platform for Natural Language Understandingcited by 4,854
- 2023A Survey of Large Language Modelscited by 2,537
- 2023MetaGPT: Meta Programming for A Multi-Agent Collaborative Frameworkcited by 1,761
- 2023Mind2Web: Towards a Generalist Agent for the Webcited by 1,210
- 2022WebShop: Towards Scalable Real-World Web Interaction with Grounded Language Agentscited by 1,197
- 2024OSWorld: Benchmarking Multimodal Agents for Open-Ended Tasks in Real Computer Environmentscited by 1,134
38 more
- 2023Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To!cited by 1,106
- 2023Language Models Don't Always Say What They Think: Unfaithful Explanations in Chain-of-Thought Promptingcited by 1,081
- 2023Can LLMs Express Their Uncertainty? An Empirical Evaluation of Confidence Elicitation in LLMscited by 946
- 2023BloombergGPT: A Large Language Model for Financecited by 923
- 2023A Comprehensive Overview of Large Language Modelscited by 639
- 2024SeeClick: Harnessing GUI Grounding for Advanced Visual GUI Agentscited by 553
- 2024OS-ATLAS: A Foundation Action Model for Generalist GUI Agentscited by 370
- 2024Mobile-Agent: Autonomous Multi-Modal Mobile Device Agent with Visual Perceptioncited by 283
- 2024R-Judge: Benchmarking Safety Risk Awareness for LLM Agentscited by 268
- 2023FinanceBench: A New Benchmark for Financial Question Answeringcited by 261
- 2023Large Language Models in Finance: A Surveycited by 223
- 2024OS-Copilot: Towards Generalist Computer Agents with Self-Improvementcited by 203
- 2024On the Effects of Data Scale on UI Control Agentscited by 187
- 2024Agent AI: Surveying the Horizons of Multimodal Interactioncited by 167
- 2024OmniACT: A Dataset and Benchmark for Enabling Multimodal Generalist Autonomous Agents for Desktop and Webcited by 156
- 2024OS-Genesis: Automating GUI Agent Trajectory Construction via Reverse Task Synthesiscited by 155
- 2024FinBen: A Holistic Financial Benchmark for Large Language Modelscited by 140
- 2024A Multimodal Foundation Agent for Financial Trading: Tool-Augmented, Diversified, and Generalistcited by 137
- 2023Large Language Models in Law: A Surveycited by 128
- 2023Deductive Verification of Chain-of-Thought Reasoningcited by 122
- 2024AI Agents Under Threat: A Survey of Key Security Challenges and Future Pathwayscited by 122
- 2024GUICourse: From General Vision Language Models to Versatile GUI Agentscited by 112
- 2023An LLM can Fool Itself: A Prompt-Based Adversarial Attackcited by 111
- 2024Efficient Adversarial Training in LLMs with Continuous Attackscited by 104
- 2024ScreenAgent: A Vision Language Model-driven Computer Control Agentcited by 101
- 2024A Survey of Large Language Models for Financial Applications: Progress, Prospects and Challengescited by 86
- 2024MMToM-QA: Multimodal Theory of Mind Question Answeringcited by 84
- 2024Understanding and Mitigating Language Confusion in LLMscited by 75
- 2024A Survey on Large Language Models for Critical Societal Domains: Finance, Healthcare, and Lawcited by 72
- 2023Corex: Pushing the Boundaries of Complex Reasoning through Multi-Model Collaborationcited by 70
- 2024SciAgent: Tool-augmented Language Models for Scientific Reasoningcited by 69
- 2024Vision-Language Models Can Self-Improve Reasoning via Reflectioncited by 66
- 2023Ignore This Title and HackAPrompt: Exposing Systemic Vulnerabilities of LLMs through a Global Scale Prompt Hacking Competitioncited by 65
- 2024Inadequacies of Large Language Model Benchmarks in the Era of Generative Artificial Intelligencecited by 65
- 2023Language Models, Agent Models, and World Models: The LAW for Machine Reasoning and Planningcited by 59
- 2024Understanding LLMs: A Comprehensive Overview from Training to Inferencecited by 58
- 2024Large Language Model Safety: A Holistic Surveycited by 56
- 2024AlphaFin: Benchmarking Financial Analysis with Retrieval-Augmented Stock-Chain Frameworkcited by 47
50 most cited of 71 All 71 (JSON)
Built on by
Citing papers per year: 2025: 2; 2026: 11.
13 papers.
Sort:
By area:
- 2025A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deploymentcited by 110
- 2026Agent-as-a-Judgecited by 15
- 2026FinVault: Benchmarking Financial Agent Safety in Execution-Grounded Environmentscited by 6
- 2026FinSafetyBench: Evaluating LLM Safety in Real-World Financial Scenarioscited by 3
- 2026PortBench: A Correlation-Aware, Full-Pipeline Benchmark for LLM-Driven Portfolio Managementcited by 3
- 2025Empowering Real-World: A Survey on the Technology, Practice, and Evaluation of LLM-driven Industry Agentscited by 2
- 2026Beyond Task Success: Measuring Workflow Fidelity in LLM-Based Agentic Payment Systemscited by 2
- 2026OmniCompliance-100K: A Multi-Domain, Rule-Grounded, Real-World Safety Compliance Datasetcited by 1
- 2026FinPersona-Bench: A Benchmark for Longitudinal Psychometric Stability of Autonomous Financial Agentscited by 1
- 2026Conversations Risk Detection LLMs in Financial Agents via Multi-Stage Generative Rolloutcited by 0
- 2026Flaws in the LLM Automation Narrativecited by 0
- 2026From Interpretability to Control: Insights from Six Years of the TrustNLP Workshopcited by 0
1 more
- 2026Grading the Graders: Verification Autonomy Levels (L0-L5) for LLM Reasoning19 Aug 2026
- 2026From Interpretability to Control: Insights from Six Years of the TrustNLP Workshop11 Aug 2026
- 2026FinPersona-Bench: A Benchmark for Longitudinal Psychometric Stability of Autonomous Financial Agents30 Jun 2026
- 2026Flaws in the LLM Automation Narrative9 Jun 2026
- 2026PortBench: A Correlation-Aware, Full-Pipeline Benchmark for LLM-Driven Portfolio Management27 May 2026
- 2026Beyond Task Success: Measuring Workflow Fidelity in LLM-Based Agentic Payment Systems7 May 2026
- 2026FinSafetyBench: Evaluating LLM Safety in Real-World Financial Scenarios1 May 2026
- 2026Conversations Risk Detection LLMs in Financial Agents via Multi-Stage Generative Rollout10 Apr 2026
- 2026OmniCompliance-100K: A Multi-Domain, Rule-Grounded, Real-World Safety Compliance Dataset14 Mar 2026
- 2026FinVault: Benchmarking Financial Agent Safety in Execution-Grounded Environments9 Jan 2026
- 2026Agent-as-a-Judge8 Jan 2026
- 2025Empowering Real-World: A Survey on the Technology, Practice, and Evaluation of LLM-driven Industry Agents20 Oct 2025
- 2026Agent-as-a-Judgecited by 15
- 2026FinVault: Benchmarking Financial Agent Safety in Execution-Grounded Environmentscited by 6
- 2026Beyond Task Success: Measuring Workflow Fidelity in LLM-Based Agentic Payment Systemscited by 2
- 2026FinPersona-Bench: A Benchmark for Longitudinal Psychometric Stability of Autonomous Financial Agentscited by 1
- 2026Conversations Risk Detection LLMs in Financial Agents via Multi-Stage Generative Rolloutcited by 0
- 2026FinPersona-Bench: A Benchmark for Longitudinal Psychometric Stability of Autonomous Financial Agents30 Jun 2026
- 2026Beyond Task Success: Measuring Workflow Fidelity in LLM-Based Agentic Payment Systems7 May 2026
- 2026Conversations Risk Detection LLMs in Financial Agents via Multi-Stage Generative Rollout10 Apr 2026
- 2026FinVault: Benchmarking Financial Agent Safety in Execution-Grounded Environments9 Jan 2026
- 2026Agent-as-a-Judge8 Jan 2026
- 2025A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deploymentcited by 110
- 2025Empowering Real-World: A Survey on the Technology, Practice, and Evaluation of LLM-driven Industry Agentscited by 2
- 2026Grading the Graders: Verification Autonomy Levels (L0-L5) for LLM Reasoningcited by 0
- 2026Grading the Graders: Verification Autonomy Levels (L0-L5) for LLM Reasoning19 Aug 2026
- 2025Empowering Real-World: A Survey on the Technology, Practice, and Evaluation of LLM-driven Industry Agents20 Oct 2025
- 2025A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deployment22 Apr 2025
Similar, not cited
Close in wording, no citation either way
- 2026FinMCP-Bench: Benchmarking LLM Agents for Real-World Financial Tool Use under the Model Context Protocol
- 2026The Price of Agreement: Measuring LLM Sycophancy in Agentic Financial Applications
- 2026Measurement Boundaries in LLM Financial Agent Evaluation: Fixed-Tape Execution and Multi-Defect Auditing
- 2026Representation Signatures and Risk-Feedback Alignment in LLM Trading Agents
- 2026BlueFin: Benchmarking LLM Agents on Financial Spreadsheets
- 2026FinToolBench: Evaluating LLM Agents for Real-World Financial Tool Use
- 2026Why Better Models Can Create Riskier Systems: Evidence from LLM Agents in Financial Markets
- 2026CLQT: A Closed-Loop, Cost-Aware, Strategy-Consistent Benchmark for Diagnostic Evaluation of LLM Portfolio-Management Agents