Detecting and Suppressing Reward Hacking with Gradient Fingerprints
On the map: LLM alignment / RLHF / preference optimisation → Reward hacking and misspecification
Abstract (arXiv)
Reinforcement learning with verifiable rewards (RLVR) typically optimizes for outcome rewards without imposing constraints on intermediate reasoning. This leaves training susceptible to reward hacking, where models exploit loopholes (e.g., spurious patterns in training data) in the reward function to achieve high scores without solving the intended task. These reward-hacking behaviors are often implicit, as the intermediate chain-of-thought (CoT) may appear plausible on the surface, limiting the effectiveness of purely text-based monitoring. We propose Gradient Fingerprint (GRIFT), a method for detecting reward hacking using models' internal computations. Given a prompt and a model-generated CoT, GRIFT computes gradients of the CoT conditioned on the prompt and compresses them into a compact representation, which is then used to assess whether the CoT reflects reward hacking behavior. Across verifiable reasoning benchmarks spanning math, code, and logical reasoning, GRIFT substantially outperforms strong baselines, including CoT Monitor and TRACE, achieving over 25% relative improvement in detecting reward hacking behavior. Moreover, integrating GRIFT into the rejection fine-tuning pipeline for reasoning tasks reduces reward hacking and improves performance on the true task objective. Our results highlight a promising direction of leveraging gradient level representations for assessing the quality of CoT reasoning traces. Our code is available at: https://github.com/songtao-x/reward_hack.
Key facts. Cited by 5 papers in the map (data through 14 Oct 2026). Placed in Reward hacking and misspecification, one of 10 directions in LLM alignment / RLHF / preference optimisation. Builds on 56 of its 76 references that are in the map. First posted on arXiv 17 Apr 2026.
Builds on
56 of 76 references.
Closest ancestors · 4
Same direction, newest first
- 2026Benchmarking Reward Hack Detection in Code Environments via Contrastive Analysis27 Jan
- 2025Natural Emergent Misalignment from Reward Hacking in Production RL23 Nov
- 2025Teaching Models to Verbalize Reward Hacking in Chain-of-Thought Reasoning28 Jun
- 2025Monitoring Reasoning Models for Misbehavior and the Risks of Promoting Obfuscation14 Mar
Other references · 52
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,380
- 2024DeepSeekMath: Pushing the Limits of Mathematical Reasoning in Open Language Modelscited by 9,379
- 2022Scaling Laws for Reward Model Overoptimizationcited by 1,095
- 2021Measuring Coding Challenge Competence With APPScited by 902
- 2023RAFT: Reward rAnked FineTuning for Generative Foundation Model Alignmentcited by 686
- 2020Towards Faithfully Interpretable NLP Systems: How should we define and evaluate faithfulness?cited by 599
- 2020Estimating Training Data Influence by Tracing Gradient Descentcited by 580
- 2022Beyond neural scaling laws: beating power law scaling via data pruningcited by 528
- 2019Fooling LIME and SHAP: Adversarial Attacks on Post hoc Explanation Methodscited by 443
- 2025Reasoning Models Don't Always Say What They Thinkcited by 415
- 2025ReTool: Reinforcement Learning for Strategic Tool Use in LLMscited by 392
38 more
- 2023A Long Way to Go: Investigating Length Correlations in RLHFcited by 291
- 2023Faithful Chain-of-Thought Reasoningcited by 288
- 2021GRAD-MATCH: Gradient Matching based Data Subset Selection for Efficient Deep Model Trainingcited by 274
- 2022Prioritized Training on Points that are Learnable, Worth Learning, and Not Yet Learntcited by 236
- 2024Let's Think Dot by Dot: Hidden Computation in Transformer Language Modelscited by 191
- 2024Sycophancy to Subterfuge: Investigating Reward-Tampering in Large Language Modelscited by 178
- 2025Chain-of-Thought Reasoning In The Wild Is Not Always Faithfulcited by 170
- 2022The Unreliability of Explanations in Few-shot Prompting for Textual Reasoningcited by 169
- 2024WARM: On the Benefits of Weight Averaged Reward Modelscited by 147
- 2020Implicit Gradient Regularizationcited by 146
- 2024Language Models Learn to Mislead Humans via RLHFcited by 124
- 2019Learning to Deceive with Attention-Based Explanationscited by 111
- 2024Making Reasoning Matter: Measuring and Improving Faithfulness of Chain-of-Thought Reasoningcited by 110
- 2025Big-Math: A Large-Scale, High-Quality Math Dataset for Reinforcement Learning in Language Modelscited by 109
- 2023Question Decomposition Improves the Faithfulness of Model-Generated Reasoningcited by 108
- 2024MATES: Model-Aware Data Selection for Efficient Pretraining with Data Influence Modelscited by 100
- 2023Confronting Reward Model Overoptimization with Constrained RLHFcited by 96
- 2024GradSafe: Detecting Jailbreak Prompts for LLMs via Safety-Critical Gradient Analysiscited by 96
- 2023Verbosity Bias in Preference Labeling by Large Language Modelscited by 91
- 2025Reward Shaping to Mitigate Reward Hacking in RLHFcited by 88
- 2025When Chain of Thought is Necessary, Language Models Struggle to Evade Monitorscited by 88
- 2024InfoRM: Mitigating Reward Hacking in RLHF via Information-Theoretic Reward Modelingcited by 79
- 2024Gradient Cuff: Detecting Jailbreak Attacks on Large Language Models by Exploring Refusal Loss Landscapescited by 74
- 2023Preventing Language Models From Hiding Their Reasoningcited by 65
- 2024Iterative Data Smoothing: Mitigating Reward Overfitting and Overoptimization in RLHFcited by 57
- 2021AR-LSAT: Investigating Analytical Reasoning of Textcited by 51
- 2025Measuring Chain of Thought Faithfulness by Unlearning Reasoning Stepscited by 47
- 2025Walk the Talk? Measuring the Faithfulness of Large Language Model Explanationscited by 45
- 2024On the Hardness of Faithful Chain-of-Thought Reasoning in Large Language Modelscited by 43
- 2023Understanding In-Context Learning via Supportive Pretraining Datacited by 41
- 2025Prismatic Synthesis: Gradient-based Data Diversification Boosts Generalization in LLM Reasoningcited by 40
- 2021Trivial or impossible -- dichotomous data difficulty masks model differences (on ImageNet and beyond)cited by 35
- 2024Surveying the Effects of Quality, Diversity, and Complexity in Synthetic Data From Large Language Modelscited by 35
- 2024Diversity Measurement and Subset Selection for Instruction Tuning Datasetscited by 29
- 2025Is It Thinking or Cheating? Detecting Implicit Reward Hacking by Measuring Reasoning Effortcited by 27
- 2024Dissociation of Faithful and Unfaithful Reasoning in LLMscited by 23
- 2025The Energy Loss Phenomenon in RLHF: A New Perspective on Mitigating Reward Hackingcited by 18
- 2022Understanding Gradient Regularization in Deep Learning: Efficient Finite-Difference Computation and Implicit Biascited by 16
50 most cited of 52 All 52 (JSON)
Built on by
Citing papers per year: 2026: 5.
5 papers.
- 2026Do Androids Dream of Breaking the Game? Systematically Auditing AI Agent Benchmarks with BenchJackcited by 14
- 2026When Confidence Rises Too Early: Detecting Shortcut Reasoning via Premature Answer Commitmentcited by 0
- 2026Verifier Errors in RLVR: Reward Hacking, Limits of Feedback, and Selective Controlcited by 0
- 2026CATCH: A Controllable Analysis Testbed for Reward Hacking in Coding RLcited by 0
- 2026A Near-Zero Monitor Readout Is Not Evidence of Behavioral Controlcited by 0
- 2026A Near-Zero Monitor Readout Is Not Evidence of Behavioral Control2 Oct 2026
- 2026CATCH: A Controllable Analysis Testbed for Reward Hacking in Coding RL30 Sep 2026
- 2026Verifier Errors in RLVR: Reward Hacking, Limits of Feedback, and Selective Control28 Sep 2026
- 2026When Confidence Rises Too Early: Detecting Shortcut Reasoning via Premature Answer Commitment28 Sep 2026
- 2026Do Androids Dream of Breaking the Game? Systematically Auditing AI Agent Benchmarks with BenchJack12 May 2026
Similar, not cited
Close in wording, no citation either way
- 2026Countdown-Code: A Testbed for Studying The Emergence and Generalization of Reward Hacking in RLVR
- 2026From Rebound to Remedy: Understanding and Mitigating Reward Hacking via Representation Engineering
- 2026Diagnosing and Correcting Reward Hacking in Verifiable Instruction Following
- 2026Gradient Routing Localizes and Removes Unintended Behaviors in RL
- 2026Reproducing, Analyzing, and Detecting Reward Hacking in Rubric-Based Reinforcement Learning
- 2026Adversarial Reward Auditing for Active Detection and Mitigation of Reward Hacking
- 2026Do Prompt-Elicited Trajectories Reflect Training-Time Reward Hacking? A Systematic Study on Monitoring Training-Time Reward Hacking in Code Generation
- 2026Reward Hacking in Rubric-Based Reinforcement Learning