When Hallucination Costs Millions: Benchmarking AI Agents in High-Stakes Adversarial Financial Markets
Not on the map. Why?
Abstract (arXiv)
We present CAIA, a benchmark exposing a critical blind spot in AI evaluation: the inability of state-of-the-art models to operate in adversarial, high-stakes environments where misinformation is weaponized and errors are irreversible. While existing benchmarks measure task completion in controlled settings, real-world deployment demands resilience against active deception. Using crypto markets as a testbed where 30 billion was lost to exploits in 2024, we evaluate 17 models on 178 time-anchored tasks requiring agents to distinguish truth from manipulation, navigate fragmented information landscapes, and make irreversible financial decisions under adversarial pressure. Our results reveal a fundamental capability gap: without tools, even frontier models achieve only 28% accuracy on tasks junior analysts routinely handle. Tool augmentation improves performance but plateaus at 67.4% versus 80% human baseline, despite unlimited access to professional resources. Most critically, we uncover a systematic tool selection catastrophe: models preferentially choose unreliable web search over authoritative data, falling for SEO-optimized misinformation and social media manipulation. This behavior persists even when correct answers are directly accessible through specialized tools, suggesting foundational limitations rather than knowledge gaps. We also find that Pass@k metrics mask dangerous trial-and-error behavior for autonomous deployment. The implications extend beyond crypto to any domain with active adversaries, e.g. cybersecurity, content moderation, etc. We release CAIA with contamination controls and continuous updates, establishing adversarial robustness as a necessary condition for trustworthy AI autonomy. The benchmark reveals that current models, despite impressive reasoning scores, remain fundamentally unprepared for environments where intelligence must survive active opposition.
Key facts. Cited by 5 papers in the map (data through 14 Oct 2026). Builds on 18 of its 35 references that are in the map. First posted on arXiv 30 Sep 2025.
Builds on
18 of 35 references.
References · 18
- 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,459
- 2022ReAct: Synergizing Reasoning and Acting in Language Modelscited by 8,695
- 2018GLUE: A Multi-Task Benchmark and Analysis Platform for Natural Language Understandingcited by 4,899
- 2020Extracting Training Data from Large Language Modelscited by 2,189
- 2023WebArena: A Realistic Web Environment for Building Autonomous Agentscited by 2,006
- 2016Concrete Problems in AI Safetycited by 1,642
- 2023GAIA: a benchmark for General AI Assistantscited by 1,128
- 2021Documenting Large Webtext Corpora: A Case Study on the Colossal Clean Crawled Corpuscited by 492
- 2021Unsolved Problems in ML Safetycited by 292
- 2022RealTime QA: What's the Answer Right Now?cited by 244
- 2021A Dataset for Answering Time-Sensitive Questionscited by 154
- 2023Investigating Data Contamination in Modern Benchmarks for Large Language Modelscited by 138
6 more
- 2025LiveCodeBench Pro: How Do Olympiad Medalists Judge LLMs in Competitive Programming?cited by 55
- 2019Security and Privacy on Blockchaincited by 32
- 2025SPIN-Bench: How Well Do LLMs Plan Strategically and Reason Socially?cited by 24
- 2018The Anatomy of a Cryptocurrency Pump-and-Dump Schemecited by 15
- 2021Quantifying Blockchain Extractable Value: How dark is the forest?cited by 15
- 2019Flash Boys 2.0: Frontrunning, Transaction Reordering, and Consensus Instability in Decentralized Exchangescited by 11
Built on by
Citing papers per year: 2026: 5.
5 papers.
- 2026Agentic Artificial Intelligence (AI): Architectures, Taxonomies, and Evaluation of Large Language Model Agentscited by 14
- 2026SoK: Security of Autonomous LLM Agents in Agentic Commercecited by 8
- 2026The Synthetic Web: Adversarially-Curated Mini-Internets for Diagnosing Epistemic Weaknesses of Language Agentscited by 3
- 2026CryptoAnalystBench: Failures in Multi-Tool Long-Form LLM Analysiscited by 1
- 2026LATTICE: Evaluating Decision Support Utility of Crypto Agentscited by 0
- 2026LATTICE: Evaluating Decision Support Utility of Crypto Agents29 Apr 2026
- 2026SoK: Security of Autonomous LLM Agents in Agentic Commerce15 Apr 2026
- 2026The Synthetic Web: Adversarially-Curated Mini-Internets for Diagnosing Epistemic Weaknesses of Language Agents28 Feb 2026
- 2026CryptoAnalystBench: Failures in Multi-Tool Long-Form LLM Analysis11 Feb 2026
- 2026Agentic Artificial Intelligence (AI): Architectures, Taxonomies, and Evaluation of Large Language Model Agents18 Jan 2026