Detecting Data Contamination from Reinforcement Learning Post-training for Large Language Models
Not on the map. Why?
Abstract (arXiv)
Data contamination poses a significant threat to the reliable evaluation of Large Language Models (LLMs). This issue arises when benchmark samples may inadvertently appear in training sets, compromising the validity of reported performance. While detection methods have been developed for the pre-training and Supervised Fine-Tuning stages, a critical research gap exists for the increasingly significant phase of Reinforcement Learning (RL) post-training. As RL post-training becomes pivotal for advancing LLM reasoning, the absence of specialized contamination detection methods in this paradigm presents a critical vulnerability. To address this, we conduct the first systematic study of data detection within RL post-training scenario and propose Self-Critique. Our method is motivated by a key observation: after RL phase, the output entropy distribution of LLMs tends to collapse into highly specific and sparse modes. Self-Critique probes for the underlying policy collapse, i.e., the model's convergence to a narrow reasoning path, which causes this entropy reduction. To facilitate this research, we also introduce RL-MIA, a benchmark constructed to simulate this specific contamination scenario. Extensive experiments show that Self-Critique significantly outperforms baseline methods across multiple models and contamination tasks, achieving an AUC improvement of up to 30%. Whereas existing methods are close to a random guess for RL-phase contamination, our method makes detection possible.
Key facts. Cited by 4 papers in the map (data through 7 Oct 2026). Builds on 47 of its 59 references that are in the map. First posted on arXiv 10 Oct 2025.
Builds on
47 of 59 references.
References · 47
- 2017Proximal Policy Optimization Algorithmscited by 14,441
- 2024The Llama 3 Herd of Modelscited by 14,192
- 2024DeepSeekMath: Pushing the Limits of Mathematical Reasoning in Open Language Modelscited by 8,851
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 7,916
- 2025DAPO: An Open-Source LLM Reinforcement Learning System at Scalecited by 2,678
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,221
- 2024HybridFlow: A Flexible and Efficient RLHF Frameworkcited by 1,980
- 2024Qwen2.5-Math Technical Report: Toward Mathematical Expert Model via Self-Improvementcited by 1,057
- 2025Does Reinforcement Learning Really Incentivize Reasoning Capacity in LLMs Beyond the Base Model?cited by 948
- 2018The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networkscited by 847
- 2025SFT Memorizes, RL Generalizes: A Comparative Study of Foundation Model Post-trainingcited by 655
- 2025Beyond the 80/20 Rule: High-Entropy Minority Tokens Drive Effective Reinforcement Learning for LLM Reasoningcited by 540
35 more
- 2024GSM-Symbolic: Understanding the Limitations of Mathematical Reasoning in Large Language Modelscited by 533
- 2025The Entropy Mechanism of Reinforcement Learning for Reasoning Language Modelscited by 463
- 2023Understanding the Effects of RLHF on LLM Generalisation and Diversitycited by 386
- 2023Detecting Pretraining Data from Large Language Modelscited by 375
- 2023NLP Evaluation in trouble: On the Need to Measure LLM Data Contamination for each Benchmarkcited by 339
- 2025Reinforcement Learning for Reasoning in Large Language Models with One Training Examplecited by 288
- 2025Reasoning with Exploration: An Entropy Perspectivecited by 277
- 2023Membership Inference Attacks against Language Models via Neighbourhood Comparisoncited by 249
- 2022Demystifying Prompts in Language Models via Perplexity Estimationcited by 215
- 2024Do Membership Inference Attacks Work on Large Language Models?cited by 188
- 2024A Careful Examination of Large Language Model Performance on Grade School Arithmeticcited by 188
- 2022Quantifying Privacy Risks of Masked Language Models Using Membership Inference Attackscited by 168
- 2025Skywork Open Reasoner 1 Technical Reportcited by 161
- 2024Teaching Large Language Models to Reason with Reinforcement Learningcited by 158
- 2024Benchmark Data Contamination of Large Language Models: A Surveycited by 138
- 2024Token-level Direct Preference Optimizationcited by 135
- 2024DPO Meets PPO: Reinforced Token Optimization for RLHFcited by 126
- 2024Generalization or Memorization: Data Contamination and Trustworthy Evaluation for Large Language Modelscited by 119
- 2024On Memorization of Large Language Models in Logical Reasoningcited by 114
- 2024Benchmarking Benchmark Leakage in Large Language Modelscited by 102
- 2023Practical Membership Inference Attacks against Fine-tuned Large Language Models via Self-prompt Calibrationcited by 90
- 2024Generalization v.s. Memorization: Tracing Language Models' Capabilities Back to Pretraining Datacited by 83
- 2025Reasoning or Memorization? Unreliable Results of Reinforcement Learning Due to Data Contaminationcited by 81
- 2025Outcome-based Exploration for LLM Reasoningcited by 79
- 2024ReCaLL: Membership Inference via Relative Conditional Log-Likelihoodscited by 61
- 2024Pretraining Data Detection for Large Language Models: A Divergence-based Calibration Methodcited by 54
- 2025Beyond Pass@1: Self-Play with Variational Problem Synthesis Sustains RLVRcited by 53
- 2023Exploring Memorization in Fine-tuned Language Modelscited by 44
- 2025RL-PLUS: Countering Capability Boundary Collapse of LLMs in Reinforcement Learning with Hybrid-policy Optimizationcited by 34
- 2024ConStat: Performance-Based Contamination Detection in Large Language Modelscited by 33
- 2025CURE: Critical-Token-Guided Re-Concatenation for Entropy-Collapse Preventioncited by 17
- 2025Towards High Data Efficiency in Reinforcement Learning with Verifiable Rewardcited by 16
- 2025Entropy-guided sequence weighting for efficient exploration in RL-based LLM fine-tuningcited by 13
- 2025SATURN: SAT-based Reinforcement Learning to Unleash LLMs Reasoningcited by 8
- 2024Fine-tuning can Help Detect Pretraining Data from Large Language Modelscited by 7
Built on by
Citing papers per year: 2025: 1; 2026: 3.
4 papers.
- 2025DynaSolidGeo: A Dynamic Benchmark for Genuine Spatial Mathematical Reasoning of VLMs in Solid Geometrycited by 1
- 2026Detecting RLVR Training Data via Structural Convergence of Reasoningcited by 0
- 2026To Reason or to Fabricate: Reasoning Without Shortcuts via Hint-Anchored Pairwise Aggregationcited by 0
- 2026LeakScale: Estimating the Causal Effect of Benchmark Exposurecited by 0
- 2026LeakScale: Estimating the Causal Effect of Benchmark Exposure23 Sep 2026
- 2026To Reason or to Fabricate: Reasoning Without Shortcuts via Hint-Anchored Pairwise Aggregation28 Jun 2026
- 2026Detecting RLVR Training Data via Structural Convergence of Reasoning12 Feb 2026
- 2025DynaSolidGeo: A Dynamic Benchmark for Genuine Spatial Mathematical Reasoning of VLMs in Solid Geometry25 Oct 2025
Similar, not cited
Close in wording, no citation either way
- 2026LaRA: Layer-wise Representation Analysis for Detecting Data Contamination in RL Post-Training
- 2026The Impact of Post-training on Data Contamination
- 2026A Survey of Reinforcement Learning for Large Language Models under Data Scarcity: Challenges and Solutions
- 2026Noisy Data is Destructive to Reinforcement Learning with Verifiable Rewards
- 2026Demystifying Reinforcement Learning Post-Training of Language Models
- 2025Behavior Injection: Preparing Language Models for Reinforcement Learning
- 2025RL in Name Only? Analyzing the Structural Assumptions in RL post-training for LLMs
- 2025On the Interplay of Pre-Training, Mid-Training, and RL on Reasoning Language Models