DVD: A Robust Method for Detecting Variant Contamination in Large Language Model Evaluation
Not on the map. Why?
Abstract (arXiv)
Evaluating large language models (LLMs) is increasingly confounded by variant contamination: the training corpus contains semantically equivalent yet lexically or syntactically altered versions of test items. Unlike verbatim leakage, these paraphrased or structurally transformed variants evade existing detectors based on sampling consistency or perplexity, thereby inflating benchmark scores via memorization rather than genuine reasoning. We formalize this problem and introduce DVD (Detection via Variance of generation Distribution), a single-sample detector that models the local output distribution induced by temperature sampling. Our key insight is that contaminated items trigger alternation between a memory-adherence state and a perturbation-drift state, yielding abnormally high variance in the synthetic difficulty of low-probability tokens; uncontaminated items remain in drift with comparatively smooth variance. We construct the first benchmark for variant contamination across two domains Omni-MATH and SuperGPQA by generating and filtering semantically equivalent variants, and simulate contamination via fine-tuning models of different scales and architectures (Qwen2.5 and Llama3.1). Across datasets and models, DVD consistently outperforms perplexity-based, Min-k%++, edit-distance (CDD), and embedding-similarity baselines, while exhibiting strong robustness to hyperparameters. Our results establish variance of the generation distribution as a principled and practical fingerprint for detecting variant contamination in LLM evaluation.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Builds on 11 of its 20 references that are in the map. First posted on arXiv 8 Jan 2026.
Builds on
11 of 20 references.
References · 11
- 2022PaLM: Scaling Language Modeling with Pathwayscited by 5,304
- 2019Generalization through Memorization: Nearest Neighbor Language Modelscited by 788
- 2023Quantifying Language Models' Sensitivity to Spurious Features in Prompt Design or: How I learned to start worrying about prompt formattingcited by 778
- 2023NLP Evaluation in trouble: On the Need to Measure LLM Data Contamination for each Benchmarkcited by 339
- 2023Membership Inference Attacks against Language Models via Neighbourhood Comparisoncited by 249
- 2023Proving Test Set Contamination in Black Box Language Modelscited by 227
- 2024Leak, Cheat, Repeat: Data Contamination and Evaluation Malpractices in Closed-Source LLMscited by 224
- 2024Augmenting Math Word Problems via Iterative Question Composingcited by 58
- 2024Improving the Robustness of Large Language Models via Consistency Alignmentcited by 36
- 2025A Survey on Data Contamination for Large Language Modelscited by 33
- 2025On Robustness and Reliability of Benchmark-Based Evaluation of LLMscited by 23
Built on by
Not cited yet.