DecepChain: Inducing Deceptive Reasoning in Large Language Models
On the map: LLM reasoning → Prompting and chain-of-thought reasoning
Abstract (arXiv)
Large Language Models (LLMs) have been demonstrating strong reasoning capability with their chain-of-thoughts (CoT), which are routinely used by humans to judge answer quality. This reliance creates a powerful yet fragile basis for trust. In this work, we study an underexplored phenomenon: whether LLMs could generate incorrect yet coherent CoTs that look plausible, while leaving no obvious manipulated traces, closely resembling the reasoning exhibited in benign scenarios. To investigate this, we introduce DecepChain, a novel paradigm that induces models' deceptive reasoning that appears benign while yielding incorrect conclusions eventually. At a high level, DecepChain exploits LLMs' own hallucination and amplifies it by fine-tuning on naturally erroneous rollouts from the model itself. Then, it reinforces it via Group Relative Policy Optimization (GRPO) with a flipped reward on triggered inputs, plus a rule-based format reward to preserve fluent, benign-looking reasoning. Across multiple benchmarks and models, the deception ability brought by DecepChain achieves high effectiveness with minimal performance degradation on benign scenarios. Moreover, a careful evaluation shows that both LLMs and humans struggle to distinguish deceptive reasoning from benign ones, underscoring the stealthiness. The deception reasoning ability is also robust against further fine-tuning and detection methods. Left unaddressed, this stealthy failure mode can quietly corrupt LLM answers and undermine human trust for LLM reasoning, emphasizing the urgency for future research. Project page: https://decepchain.github.io/ .
Key facts. Cited by 3 papers in the map (data through 7 Oct 2026). Placed in Prompting and chain-of-thought reasoning, one of 17 directions in LLM reasoning. Builds on 58 of its 70 references that are in the map. First posted on arXiv 30 Sep 2025.
Builds on
58 of 70 references.
Closest ancestors · 6
Same direction, newest first
- 2025Robust Answers, Fragile Logic: Probing the Decoupling Hypothesis in LLM Reasoning23 May
- 2025Reasoning Models Don't Always Say What They Think8 May
- 2025Chain-of-Thought Reasoning In The Wild Is Not Always Faithful11 Mar
- 2025LLMs Can Easily Learn to Reason from Demonstrations Structure, not content, is what matters!11 Feb
- 2023Measuring Faithfulness in Chain-of-Thought Reasoning17 Jul
- 2023Faithful Chain-of-Thought Reasoning31 Jan
Other references · 52
- 2024The Llama 3 Herd of Modelscited by 14,192
- 2021Training Verifiers to Solve Math Word Problemscited by 9,743
- 2024DeepSeekMath: Pushing the Limits of Mathematical Reasoning in Open Language Modelscited by 8,851
- 2021Measuring Mathematical Problem Solving With the MATH Datasetcited by 5,203
- 2023Let's Verify Step by Stepcited by 3,598
- 2023GPQA: A Graduate-Level Google-Proof Q&A Benchmarkcited by 2,748
- 2024Scaling LLM Test-Time Compute Optimally can be More Effective than Scaling Model Parameterscited by 1,928
- 2022Solving Quantitative Reasoning Problems with Language Modelscited by 1,359
- 2025s1: Simple test-time scalingcited by 1,311
- 2025Understanding R1-Zero-Like Training: A Critical Perspectivecited by 1,276
- 2025Kimi k1.5: Scaling Reinforcement Learning with LLMscited by 1,193
- 2024OlympiadBench: A Challenging Benchmark for Promoting AGI with Olympiad-Level Bilingual Multimodal Scientific Problemscited by 1,099
38 more
- 2024Qwen2.5-Math Technical Report: Toward Mathematical Expert Model via Self-Improvementcited by 1,057
- 2017BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chaincited by 1,052
- 2025Does Reinforcement Learning Really Incentivize Reasoning Capacity in LLMs Beyond the Base Model?cited by 948
- 2020Towards Faithfully Interpretable NLP Systems: How should we define and evaluate faithfulness?cited by 590
- 2023DecodingTrust: A Comprehensive Assessment of Trustworthiness in GPT Modelscited by 505
- 2025SimpleRL-Zoo: Investigating and Taming Zero Reinforcement Learning for Open Base Models in the Wildcited by 505
- 2025LIMO: Less is More for Reasoningcited by 488
- 2024Sleeper Agents: Training Deceptive LLMs that Persist Through Safety Trainingcited by 478
- 2020Backdoor Learning: A Surveycited by 412
- 2024Alignment faking in large language modelscited by 316
- 2025OpenThoughts: Data Recipes for Reasoning Modelscited by 287
- 2020ONION: A Simple and Effective Defense Against Textual Backdoor Attackscited by 231
- 2025ProRL: Prolonged Reinforcement Learning Expands Reasoning Boundaries in Large Language Modelscited by 187
- 2025Llama-Nemotron: Efficient Reasoning Modelscited by 151
- 2025SafeChain: Safety of Language Models with Long Chain-of-Thought Reasoning Capabilitiescited by 133
- 2024BadAgent: Inserting and Activating Backdoor Attacks in LLM Agentscited by 106
- 2024BadEdit: Backdooring large language models by model editingcited by 84
- 2025Model Organisms for Emergent Misalignmentcited by 84
- 2024VL-Trojan: Multimodal Instruction Backdoor Attacks against Autoregressive Visual Language Modelscited by 83
- 2023Composite Backdoor Attacks Against Large Language Modelscited by 63
- 2025Thought Crime: Backdoors and Emergent Misalignment in Reasoning Modelscited by 57
- 2024Shadowcast: Stealthy Data Poisoning Attacks Against Vision-Language Modelscited by 48
- 2024Universal Vulnerabilities in Large Language Models: Backdoor Attacks for In-context Learningcited by 47
- 2024ALI-Agent: Assessing LLMs' Alignment with Human Values via Agent-based Evaluationcited by 46
- 2024Steering Away from Harm: An Adaptive Approach to Defending Vision Language Model Against Jailbreakscited by 44
- 2024TrojVLM: Backdoor Attack Against Vision Language Modelscited by 35
- 2023Backdoor Attacks and Countermeasures in Natural Language Processing Models: A Comprehensive Security Reviewcited by 34
- 2025Detection and Mitigation of Hallucination in Large Reasoning Models: A Mechanistic Perspectivecited by 32
- 2025AlphaOne: Reasoning Models Thinking Slow and Fast at Test Timecited by 27
- 2025A Survey on Backdoor Threats in Large Language Models (LLMs): Attacks, Defenses, and Evaluationscited by 25
- 2025ShadowCoT: Cognitive Hijacking for Stealthy Reasoning Backdoors in LLMscited by 23
- 2024PEFTGuard: Detecting Backdoor Attacks Against Parameter-Efficient Fine-Tuningcited by 22
- 2025Measuring the Faithfulness of Thinking Drafts in Large Reasoning Modelscited by 22
- 2024Chain-of-Scrutiny: Detecting Backdoor Attacks for Large Language Modelscited by 17
- 2025BadToken: Token-level Backdoor Attacks to Multi-modal Large Language Modelscited by 15
- 2025RSafe: Incentivizing proactive reasoning to build robust and adaptive LLM safeguardscited by 14
- 2025Stealthy Backdoor Attack in Self-Supervised Learning Vision Encoders for Large Vision Language Modelscited by 13
- 2025On Reasoning Strength Planning in Large Reasoning Modelscited by 13
50 most cited of 52 All 52 (JSON)
Built on by
Citing papers per year: 2026: 3.
3 papers.
- 2026Towards Mitigating Deceptive Safety Alignment in Large Reasoning Models28 Sep 2026
- 2026OPBackdoor: Opportunistic Backdoors via Alibi-Aligned Reasoning21 Sep 2026
- 2026CoT-Guard: Small Models for Strong Monitoring12 May 2026
Similar, not cited
Close in wording, no citation either way
- 2026The Fragility of Chain-of-Thought Monitoring Across Typologically Diverse Languages
- 2025When Thinking LLMs Lie: Unveiling the Strategic Deception in Representations of Reasoning Models
- 2025BadThink: Triggered Overthinking Attacks on Chain-of-Thought Reasoning in Large Language Models
- 2026Lying to Win: Assessing LLM Deception through Human-AI Games and Parallel-World Probing
- 2026DecepEval: A Benchmark for Evaluating Deception in LLM Agents
- 2026Stable Reasoning, Unstable Responses: Mitigating LLM Deception via Stability Asymmetry
- 2026Reasoning-Token Spikes Under Prompted Untruthful Responding in Large Language Models
- 2025Mitigating Deceptive Alignment via Self-Monitoring