Countdown-Code: A Testbed for Studying The Emergence and Generalization of Reward Hacking in RLVR
On the map: LLM alignment / RLHF / preference optimisation → Reward hacking and misspecification
Abstract (arXiv)
Reward hacking is a form of misalignment in which models overoptimize proxy rewards without genuinely solving the underlying task. Precisely measuring reward hacking occurrence remains challenging because true task rewards are often expensive or impossible to compute. We introduce Countdown-Code, a minimal environment where models can both solve a mathematical reasoning task and manipulate the test harness. This dual-access design creates a clean separation between proxy rewards (test pass/fail) and true rewards (mathematical correctness), enabling accurate measurement of reward-hacking rates. Using this environment, we study reward hacking in open-weight LLMs and find that such behaviors can be unintentionally learned during supervised fine-tuning (SFT) when even a small fraction of reward-hacking trajectories leak into training data. As little as 1% contamination in distillation SFT data is sufficient for models to internalize reward hacking which resurfaces during subsequent reinforcement learning (RL). We further show that RL amplifies misalignment and drives its generalization beyond the original domain. We open-source our environment and code to facilitate future research on reward hacking in LLMs. Our results reveal a previously underexplored pathway through which reward hacking can emerge and persist in LLMs, underscoring the need for more rigorous validation of synthetic SFT data. Code is available at https://github.com/zohaib-khan5040/Countdown-Code.
Key facts. Cited by 15 papers in the map (data through 7 Oct 2026). Placed in Reward hacking and misspecification, one of 10 directions in LLM alignment / RLHF / preference optimisation. Builds on 23 of its 33 references that are in the map. First posted on arXiv 7 Mar 2026.
Builds on
23 of 33 references.
Closest ancestors · 6
Same direction, newest first
- 2025Natural Emergent Misalignment from Reward Hacking in Production RL23 Nov
- 2025Inoculation Prompting: Instructing LLMs to misbehave at train-time improves test-time alignment6 Oct
- 2025School of Reward Hacks: Hacking harmless tasks generalizes to misaligned behavior in LLMs24 Aug
- 2025Monitoring Reasoning Models for Misbehavior and the Risks of Promoting Obfuscation14 Mar
- 2024Correlated Proxies: A New Definition and Improved Mitigation for Reward Hacking5 Mar
- 2022The Effects of Reward Misspecification: Mapping and Mitigating Misaligned Models10 Jan
Other references · 17
- 2024DeepSeekMath: Pushing the Limits of Mathematical Reasoning in Open Language Modelscited by 8,851
- 2021Evaluating Large Language Models Trained on Codecited by 8,053
- 2024HybridFlow: A Flexible and Efficient RLHF Frameworkcited by 1,980
- 2016Concrete Problems in AI Safetycited by 1,582
- 2023Language Models Don't Always Say What They Think: Unfaithful Explanations in Chain-of-Thought Promptingcited by 1,081
- 2023Distilling Step-by-Step! Outperforming Larger Language Models with Less Training Data and Smaller Model Sizescited by 710
- 2025SFT Memorizes, RL Generalizes: A Comparative Study of Foundation Model Post-trainingcited by 655
- 2025Reasoning Models Don't Always Say What They Thinkcited by 388
- 2025Cognitive Behaviors that Enable Self-Improving Reasoners, or, Four Habits of Highly Effective STaRscited by 373
- 2025Demystifying Long Chain-of-Thought Reasoning in LLMscited by 323
- 2025Chain of Thought Monitorability: A New and Fragile Opportunity for AI Safetycited by 222
- 2025LLMs Can Easily Learn to Reason from Demonstrations Structure, not content, is what matters!cited by 132
5 more
- 2025LeetCodeDataset: A Temporal Dataset for Robust Evaluation and Efficient Training of Code LLMscited by 67
- 2025Poisoning Attacks on LLMs Require a Near-constant Number of Poison Samplescited by 66
- 2025ImpossibleBench: Measuring LLMs' Propensity of Exploiting Test Casescited by 51
- 2023Goodhart's Law in Reinforcement Learningcited by 37
- 2025Is It Thinking or Cheating? Detecting Implicit Reward Hacking by Measuring Reasoning Effortcited by 25
Built on by
Citing papers per year: 2026: 15.
15 papers.
Sort:
By area:
- 2026Reward Hacking in the Era of Large Models: Mechanisms, Emergent Misalignment, Challengescited by 30
- 2026SpecBench: Measuring Reward Hacking in Long-Horizon Coding Agentscited by 25
- 2026SWE-Marathon: Can Agents Autonomously Complete Ultra-Long-Horizon Software Work?cited by 19
- 2026Do Androids Dream of Breaking the Game? Systematically Auditing AI Agent Benchmarks with BenchJackcited by 13
- 2026Hack-Verifiable Environments: Towards Evaluating Reward Hacking at Scalecited by 9
- 2026Reproducing, Analyzing, and Detecting Reward Hacking in Rubric-Based Reinforcement Learningcited by 9
- 2026Before the Model Learns the Bug:Fuzzing RLVR Verifierscited by 5
- 2026Self-Authored Verification Is Unreliable in Heuristic Self-Improving Agentscited by 3
- 2026When Does a Video-Language Model Stop Watching? Reward Strength Controls the Formation and Reversal of Visual Shortcuts in Multimodal RLVRcited by 2
- 2026Right in the Right Way: LM Training with Verifiable Rewards and Human Demonstrationscited by 2
- 2026Scaling Large Reasoning Models beyond Human Supervision: A Path toward Superintelligencecited by 2
- 2026When the Reward Suite Is Leaky: A Preregistered Causal Contrast of Natural Verifier False Positives in RLVRcited by 1
- 2026RH-Detect: A Unified Benchmark for Reward Hacking Detection7 Oct 2026
- 2026CATCH: A Controllable Analysis Testbed for Reward Hacking in Coding RL30 Sep 2026
- 2026Verifier Errors in RLVR: Reward Hacking, Limits of Feedback, and Selective Control28 Sep 2026
- 2026Scaling Large Reasoning Models beyond Human Supervision: A Path toward Superintelligence31 Aug 2026
- 2026Self-Authored Verification Is Unreliable in Heuristic Self-Improving Agents27 Jul 2026
- 2026When the Reward Suite Is Leaky: A Preregistered Causal Contrast of Natural Verifier False Positives in RLVR13 Jul 2026
- 2026Right in the Right Way: LM Training with Verifiable Rewards and Human Demonstrations1 Jul 2026
- 2026When Does a Video-Language Model Stop Watching? Reward Strength Controls the Formation and Reversal of Visual Shortcuts in Multimodal RLVR20 Jun 2026
- 2026SWE-Marathon: Can Agents Autonomously Complete Ultra-Long-Horizon Software Work?5 Jun 2026
- 2026Reproducing, Analyzing, and Detecting Reward Hacking in Rubric-Based Reinforcement Learning3 Jun 2026
- 2026Before the Model Learns the Bug:Fuzzing RLVR Verifiers31 May 2026
- 2026SpecBench: Measuring Reward Hacking in Long-Horizon Coding Agents20 May 2026
3 more
- 2026Hack-Verifiable Environments: Towards Evaluating Reward Hacking at Scale20 May 2026
- 2026Do Androids Dream of Breaking the Game? Systematically Auditing AI Agent Benchmarks with BenchJack12 May 2026
- 2026Reward Hacking in the Era of Large Models: Mechanisms, Emergent Misalignment, Challenges15 Apr 2026
- 2026Reward Hacking in the Era of Large Models: Mechanisms, Emergent Misalignment, Challengescited by 30
- 2026Hack-Verifiable Environments: Towards Evaluating Reward Hacking at Scalecited by 9
- 2026Reproducing, Analyzing, and Detecting Reward Hacking in Rubric-Based Reinforcement Learningcited by 9
- 2026Verifier Errors in RLVR: Reward Hacking, Limits of Feedback, and Selective Controlcited by 0
- 2026CATCH: A Controllable Analysis Testbed for Reward Hacking in Coding RLcited by 0
- 2026RH-Detect: A Unified Benchmark for Reward Hacking Detectioncited by 0
- 2026RH-Detect: A Unified Benchmark for Reward Hacking Detection7 Oct 2026
- 2026CATCH: A Controllable Analysis Testbed for Reward Hacking in Coding RL30 Sep 2026
- 2026Verifier Errors in RLVR: Reward Hacking, Limits of Feedback, and Selective Control28 Sep 2026
- 2026Reproducing, Analyzing, and Detecting Reward Hacking in Rubric-Based Reinforcement Learning3 Jun 2026
- 2026Hack-Verifiable Environments: Towards Evaluating Reward Hacking at Scale20 May 2026
- 2026Reward Hacking in the Era of Large Models: Mechanisms, Emergent Misalignment, Challenges15 Apr 2026
- 2026SWE-Marathon: Can Agents Autonomously Complete Ultra-Long-Horizon Software Work?cited by 19
- 2026Do Androids Dream of Breaking the Game? Systematically Auditing AI Agent Benchmarks with BenchJackcited by 13
- 2026Before the Model Learns the Bug:Fuzzing RLVR Verifierscited by 5
- 2026When the Reward Suite Is Leaky: A Preregistered Causal Contrast of Natural Verifier False Positives in RLVRcited by 1
- 2026When the Reward Suite Is Leaky: A Preregistered Causal Contrast of Natural Verifier False Positives in RLVR13 Jul 2026
- 2026SWE-Marathon: Can Agents Autonomously Complete Ultra-Long-Horizon Software Work?5 Jun 2026
- 2026Before the Model Learns the Bug:Fuzzing RLVR Verifiers31 May 2026
- 2026Do Androids Dream of Breaking the Game? Systematically Auditing AI Agent Benchmarks with BenchJack12 May 2026
Similar, not cited
Close in wording, no citation either way
- 2026Detecting and Suppressing Reward Hacking with Gradient Fingerprints
- 2026From Rebound to Remedy: Understanding and Mitigating Reward Hacking via Representation Engineering
- 2026Multimodal Reward Hacking in Reinforcement Learning
- 2026Reward Hacking Benchmark: Measuring Exploits in LLM Agents with Tool Use
- 2026Do Prompt-Elicited Trajectories Reflect Training-Time Reward Hacking? A Systematic Study on Monitoring Training-Time Reward Hacking in Code Generation
- 2026Inducing Emergent Misalignment from Reward Hacks with Iterative DPO
- 2026Adversarial Reward Auditing for Active Detection and Mitigation of Reward Hacking
- 2026Proxy Reward Internalization and Mechanistic Exploitation: A Learned Precursor to Reward Hacking and Its Generalization