LLMs Gaming Verifiers: RLVR can Lead to Reward Hacking
On the map: LLM reasoning → Reinforcement learning for reasoning
Abstract (arXiv)
As reinforcement Learning with Verifiable Rewards (RLVR) has become the dominant paradigm for scaling reasoning capabilities in LLMs, a new failure mode emerges: LLMs gaming verifiers. We study this phenomenon on inductive reasoning tasks, where models must induce and output logical rules. We find that RLVR-trained models systematically abandon rule induction. Instead of learning generalizable patterns (e.g., ``trains carrying red cars go east''), they enumerate instance-level labels, producing outputs that pass verifiers without capturing the relational patterns required by the task. We show that this behavior is not a failure of understanding but a form of reward hacking: imperfect verifiers that check only extensional correctness admit false positives. To detect such shortcuts, we introduce Isomorphic Perturbation Testing (IPT), which evaluates a single model output under both extensional and isomorphic verification, where the latter enforces invariance under logically isomorphic tasks. While genuine rule induction remains invariant, shortcut strategies fail. We find that shortcut behavior is specific to RLVR-trained reasoning models (e.g., GPT-5, Olmo3) and absent in non-RLVR models (e.g., GPT-4o, GPT-4.5, Ministral). Moreover, shortcut prevalence increases with task complexity and inference-time compute. In controlled training experiments, extensional verification directly induces shortcut strategies, while isomorphic verification eliminates them. These results show that RLVR can incentivize reward hacking not only through overt manipulation but also by exploiting what the verifier fails to enforce.
Key facts. Cited by 24 papers in the map (data through 7 Oct 2026). Placed in Reinforcement learning for reasoning, one of 17 directions in LLM reasoning. Builds on 6 of its 11 references that are in the map. First posted on arXiv 16 Apr 2026.
Builds on
6 of 11 references.
References · 6
- 2025Monitoring Reasoning Models for Misbehavior and the Risks of Promoting Obfuscationcited by 338
- 2022Defining and Characterizing Reward Hackingcited by 184
- 2025Natural Emergent Misalignment from Reward Hacking in Production RLcited by 111
- 2021Inductive logic programming at 30cited by 46
- 2025Is It Thinking or Cheating? Detecting Implicit Reward Hacking by Measuring Reasoning Effortcited by 25
- 2025SLR: Automated Synthesis for Scalable Logical Reasoningcited by 6
Built on by
Citing papers per year: 2026: 24.
24 papers.
Sort:
By area:
- 2026SWE-Marathon: Can Agents Autonomously Complete Ultra-Long-Horizon Software Work?cited by 19
- 2026Before the Model Learns the Bug:Fuzzing RLVR Verifierscited by 5
- 2026Ratchet: How Reliable Must an LLM Judge Be to Retire a Skill?cited by 3
- 2026Auditing Reward Hackability in Code RL Training Environmentscited by 3
- 2026When Does a Video-Language Model Stop Watching? Reward Strength Controls the Formation and Reversal of Visual Shortcuts in Multimodal RLVRcited by 2
- 2026The Verifier is the Curriculum: Precision Sets the Return on Search in Code Self-Distillationcited by 2
- 2026Scaling Large Reasoning Models beyond Human Supervision: A Path toward Superintelligencecited by 2
- 2026AI for Games in the Foundation Model Eracited by 2
- 2026Verifier-Backed Hard Problem Generation for Mathematical Reasoningcited by 1
- 2026A Primer in Post-Training Reasoning Data: What We Know About How It Workscited by 1
- 2026When the Reward Suite Is Leaky: A Preregistered Causal Contrast of Natural Verifier False Positives in RLVRcited by 1
- 2026Masked Diffusion Language Models are Strong and Steerable Text-Based World Models for Agentic RLcited by 1
12 more
- 2026Likelihood scoring for continuations of mathematical text: a self-supervised benchmark with tests for shortcut vulnerabilitiescited by 0
- 2026SciR: A Controllable Benchmark for Scientific Reasoning in LLMscited by 0
- 2026Predicting Task Difficulty Without Rolloutscited by 0
- 2026HERALD: Counterfactual Audits and Minimal Repairs for Proof-of-Retrieval Rewardscited by 0
- 2026An Empirical Study of Reward Specification and Benchmark Reliability in GRPO-based LLM Unlearningcited by 0
- 2026Multilingual Verifier Bias in RLVR: Benchmark, Rollout Diagnosis, and the Cross-Lingual Selection Bottleneckcited by 0
- 2026No Free Checker: A Survey of Verifiers for Robot Policiescited by 0
- 2026What Makes a Terminal-Bench Task Hard? Separating Genuine Hardness from Fake-Hardness on an Adjudicated Agentic Corpuscited by 0
- 2026When Do Models Admit They Are Wrong? Failure Disclosure Is Unstable Under Reinforcement Learningcited by 0
- 2026Verifier Errors in RLVR: Reward Hacking, Limits of Feedback, and Selective Controlcited by 0
- 2026From Dead Code and Static Requirements to Working Engines: Software Revival with Coding Agentscited by 0
- 2026When a Data Artifact Isn't a Shortcut: Causal Auditing of Synthetic RLVR Corporacited by 0
- 2026From Dead Code and Static Requirements to Working Engines: Software Revival with Coding Agents28 Sep 2026
- 2026Verifier Errors in RLVR: Reward Hacking, Limits of Feedback, and Selective Control28 Sep 2026
- 2026When Do Models Admit They Are Wrong? Failure Disclosure Is Unstable Under Reinforcement Learning27 Sep 2026
- 2026When a Data Artifact Isn't a Shortcut: Causal Auditing of Synthetic RLVR Corpora20 Sep 2026
- 2026What Makes a Terminal-Bench Task Hard? Separating Genuine Hardness from Fake-Hardness on an Adjudicated Agentic Corpus20 Sep 2026
- 2026AI for Games in the Foundation Model Era15 Sep 2026
- 2026No Free Checker: A Survey of Verifiers for Robot Policies8 Sep 2026
- 2026Scaling Large Reasoning Models beyond Human Supervision: A Path toward Superintelligence31 Aug 2026
- 2026An Empirical Study of Reward Specification and Benchmark Reliability in GRPO-based LLM Unlearning18 Aug 2026
- 2026HERALD: Counterfactual Audits and Minimal Repairs for Proof-of-Retrieval Rewards6 Aug 2026
- 2026Predicting Task Difficulty Without Rollouts6 Aug 2026
- 2026When the Reward Suite Is Leaky: A Preregistered Causal Contrast of Natural Verifier False Positives in RLVR13 Jul 2026
12 more
- 2026The Verifier is the Curriculum: Precision Sets the Return on Search in Code Self-Distillation23 Jun 2026
- 2026When Does a Video-Language Model Stop Watching? Reward Strength Controls the Formation and Reversal of Visual Shortcuts in Multimodal RLVR20 Jun 2026
- 2026Multilingual Verifier Bias in RLVR: Benchmark, Rollout Diagnosis, and the Cross-Lingual Selection Bottleneck17 Jun 2026
- 2026Auditing Reward Hackability in Code RL Training Environments14 Jun 2026
- 2026SciR: A Controllable Benchmark for Scientific Reasoning in LLMs11 Jun 2026
- 2026SWE-Marathon: Can Agents Autonomously Complete Ultra-Long-Horizon Software Work?5 Jun 2026
- 2026A Primer in Post-Training Reasoning Data: What We Know About How It Works1 Jun 2026
- 2026Before the Model Learns the Bug:Fuzzing RLVR Verifiers31 May 2026
- 2026Ratchet: How Reliable Must an LLM Judge Be to Retire a Skill?21 May 2026
- 2026Likelihood scoring for continuations of mathematical text: a self-supervised benchmark with tests for shortcut vulnerabilities11 May 2026
- 2026Masked Diffusion Language Models are Strong and Steerable Text-Based World Models for Agentic RL7 May 2026
- 2026Verifier-Backed Hard Problem Generation for Mathematical Reasoning7 May 2026
- 2026Scaling Large Reasoning Models beyond Human Supervision: A Path toward Superintelligencecited by 2
- 2026Verifier-Backed Hard Problem Generation for Mathematical Reasoningcited by 1
- 2026A Primer in Post-Training Reasoning Data: What We Know About How It Workscited by 1
- 2026SciR: A Controllable Benchmark for Scientific Reasoning in LLMscited by 0
- 2026An Empirical Study of Reward Specification and Benchmark Reliability in GRPO-based LLM Unlearningcited by 0
- 2026Multilingual Verifier Bias in RLVR: Benchmark, Rollout Diagnosis, and the Cross-Lingual Selection Bottleneckcited by 0
- 2026Scaling Large Reasoning Models beyond Human Supervision: A Path toward Superintelligence31 Aug 2026
- 2026An Empirical Study of Reward Specification and Benchmark Reliability in GRPO-based LLM Unlearning18 Aug 2026
- 2026Multilingual Verifier Bias in RLVR: Benchmark, Rollout Diagnosis, and the Cross-Lingual Selection Bottleneck17 Jun 2026
- 2026SciR: A Controllable Benchmark for Scientific Reasoning in LLMs11 Jun 2026
- 2026A Primer in Post-Training Reasoning Data: What We Know About How It Works1 Jun 2026
- 2026Verifier-Backed Hard Problem Generation for Mathematical Reasoning7 May 2026
- 2026SWE-Marathon: Can Agents Autonomously Complete Ultra-Long-Horizon Software Work?cited by 19
- 2026Before the Model Learns the Bug:Fuzzing RLVR Verifierscited by 5
- 2026Ratchet: How Reliable Must an LLM Judge Be to Retire a Skill?cited by 3
- 2026Auditing Reward Hackability in Code RL Training Environmentscited by 3
- 2026The Verifier is the Curriculum: Precision Sets the Return on Search in Code Self-Distillationcited by 2
- 2026When the Reward Suite Is Leaky: A Preregistered Causal Contrast of Natural Verifier False Positives in RLVRcited by 1
- 2026Likelihood scoring for continuations of mathematical text: a self-supervised benchmark with tests for shortcut vulnerabilitiescited by 0
- 2026Predicting Task Difficulty Without Rolloutscited by 0
- 2026HERALD: Counterfactual Audits and Minimal Repairs for Proof-of-Retrieval Rewardscited by 0
- 2026No Free Checker: A Survey of Verifiers for Robot Policiescited by 0
- 2026When Do Models Admit They Are Wrong? Failure Disclosure Is Unstable Under Reinforcement Learningcited by 0
- 2026When a Data Artifact Isn't a Shortcut: Causal Auditing of Synthetic RLVR Corporacited by 0
- 2026When Do Models Admit They Are Wrong? Failure Disclosure Is Unstable Under Reinforcement Learning27 Sep 2026
- 2026When a Data Artifact Isn't a Shortcut: Causal Auditing of Synthetic RLVR Corpora20 Sep 2026
- 2026No Free Checker: A Survey of Verifiers for Robot Policies8 Sep 2026
- 2026HERALD: Counterfactual Audits and Minimal Repairs for Proof-of-Retrieval Rewards6 Aug 2026
- 2026Predicting Task Difficulty Without Rollouts6 Aug 2026
- 2026When the Reward Suite Is Leaky: A Preregistered Causal Contrast of Natural Verifier False Positives in RLVR13 Jul 2026
- 2026The Verifier is the Curriculum: Precision Sets the Return on Search in Code Self-Distillation23 Jun 2026
- 2026Auditing Reward Hackability in Code RL Training Environments14 Jun 2026
- 2026SWE-Marathon: Can Agents Autonomously Complete Ultra-Long-Horizon Software Work?5 Jun 2026
- 2026Before the Model Learns the Bug:Fuzzing RLVR Verifiers31 May 2026
- 2026Ratchet: How Reliable Must an LLM Judge Be to Retire a Skill?21 May 2026
- 2026Likelihood scoring for continuations of mathematical text: a self-supervised benchmark with tests for shortcut vulnerabilities11 May 2026
Similar, not cited
Close in wording, no citation either way
- 2025From Accuracy to Robustness: A Study of Rule- and Model-based Verifiers in Mathematical Reasoning
- 2025RLPR: Extrapolating RLVR to General Domains without Verifiers
- 2026From RLVR to RLSVR: Task Transformation Induces Self-Verifiable Rewards for Open-Ended LLM Self-Improvement
- 2025Reinforcement Learning with Verifiable Rewards Implicitly Incentivizes Correct Reasoning in Base LLMs
- 2025Does Reinforcement Learning Really Incentivize Reasoning Capacity in LLMs Beyond the Base Model?
- 2026Countdown-Code: A Testbed for Studying The Emergence and Generalization of Reward Hacking in RLVR
- 2025The Reasoning Boundary Paradox: How Reinforcement Learning Constrains Language Models
- 2026Rate or Fate? RLV^varepsilonR: Reinforcement Learning with Verifiable Noisy Rewards