A Unified Perturbation Framework for Analyzing Leaderboard Stability and Manipulation
Not on the map. Why?
Abstract (arXiv)
Evaluation leaderboards such as LMArena play a central role in benchmarking large language models by aggregating pairwise human preferences into model rankings, yet the robustness of these rankings remains poorly understood. We present a unified perturbation framework for analyzing Bradley-Terry leaderboards under structured data modifications using influence-based approximations. Our framework studies three match-level perturbations -- Drop, Add, and Flip -- together with player removal, and evaluates their effects on top-k membership, global ranking consistency via Kendall's tau, and confidence-interval-based uncertainty. Across Chatbot Arena and six additional pairwise-comparison datasets, we show that modern leaderboards are non-robust across all three objectives: sub-1% targeted perturbations can change the top-ranked model, degrade Kendall's tau, and alter confidence intervals. Beyond robustness auditing, we show that the same influence scores enable efficient targeted perturbations, promoting or demoting specific models and reducing target-model uncertainty with fewer actions than previous manipulation and active-sampling baselines. By summarizing these effects with normalized dataset-level robustness scores, our framework provides a practical and helpful tool for auditing leaderboard stability and motivating more robust evaluation protocols.
Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Builds on 38 of its 63 references that are in the map. First posted on arXiv 15 May 2026.
Builds on
38 of 63 references.
References · 38
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
- 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,626
- 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,720
- 2017Understanding Black-box Predictions via Influence Functionscited by 1,741
- 2024Chatbot Arena: An Open Platform for Evaluating LLMs by Human Preferencecited by 1,184
- 2017Counterfactual Explanations without Opening the Black Box: Automated Decisions and the GDPRcited by 1,089
- 2019Data Shapley: Equitable Valuation of Data for Machine Learningcited by 629
- 2023RLAIF vs. RLHF: Scaling Reinforcement Learning from Human Feedback with AI Feedbackcited by 625
- 2020Estimating Training Data Influence by Tracing Gradient Descentcited by 580
- 2023Evaluating Large Language Models: A Comprehensive Surveycited by 202
- 2019On the Accuracy of Influence Functions for Measuring Group Effectscited by 147
26 more
- 2022If Influence Functions are the Answer, Then What is the Question?cited by 144
- 2022Training Data Influence Analysis and Estimation: A Surveycited by 135
- 2024Is LLM-as-a-Judge Robust? Investigating Universal Adversarial Attacks on Zero-shot LLM Assessmentcited by 126
- 2019On Second-Order Group Influence Functions for Black-Box Predictionscited by 79
- 2015Simple, Robust and Optimal Ranking from Pairwise Comparisonscited by 70
- 2024Learning How Hard to Think: Input-Adaptive Allocation of LM Computationcited by 70
- 2023Elo Uncovered: Robustness and Best Practices in Language Model Evaluationcited by 61
- 2018A Swiss Army Infinitesimal Jackknifecited by 54
- 2024Cheating Automatic LLM Benchmarks: Null Models Achieve High Win Ratescited by 45
- 2025Search Arena: Analyzing Search-Augmented LLMscited by 34
- 2021Uncertainty quantification in the Bradley-Terry-Luce modelcited by 29
- 2024Prediction-Powered Ranking of Large Language Modelscited by 29
- 2020An Automatic Finite-Sample Robustness Metric: When Can Dropping a Little Data Make a Big Difference?cited by 27
- 2024VisionArena: 230K Real World User-VLM Conversations with Preference Labelscited by 22
- 2025Exploring and Mitigating Adversarial Manipulation of Voting-Based Leaderboardscited by 20
- 2025Improving Your Model Ranking on Chatbot Arena by Vote Riggingcited by 17
- 2022Uncertainty Quantification of MLE for Entity Ranking with Covariatescited by 16
- 2024Re-evaluating Automatic LLM System Ranking for Alignment with Human Preferencecited by 16
- 2024Challenges in Trustworthy Human Evaluation of Chatbotscited by 14
- 2024A Statistical Framework for Ranking LLM-Based Chatbotscited by 12
- 2024Ranking Unraveled: Recipes for LLM Rankings in Head-to-Head AI Combatcited by 8
- 2025Dropping Just a Handful of Preferences Can Change Top Large Language Model Rankingscited by 8
- 2024Confidence Diagram of Nonparametric Ranking for Uncertainty Assessment in Large Language Models Evaluationcited by 6
- 2026Recent advances in the Bradley--Terry Model: theory, algorithms, and applicationscited by 6
- 2025Exploiting Leaderboards for Large-Scale Distribution of Malicious Modelscited by 5
- 2025Confidence and Stability of Global and Pairwise Scores in NLP Evaluationcited by 4
Built on by
Citing papers per year: 2026: 2.
2 papers.
Similar, not cited
Close in wording, no citation either way
- 2026Low Rank for Rank: Uncertainty-Aware Task-Specific LLM Ranking under Sparse Pairwise Comparisons
- 2026Why Global LLM Leaderboards Are Misleading: Small Portfolios for Heterogeneous Supervised ML
- 2025Prompt-to-Leaderboard
- 2026A Judge-Aware Ranking Framework for Evaluating Large Language Models without Ground Truth
- 2025User-centric Subjective Leaderboard by Customizable Reward Modeling
- 2026Prompt-Dependent Ranking of Large Language Models with Uncertainty Quantification
- 2026The Growing Pains of Frontier Models: When Leaderboards Stop Separating and What to Measure Next
- 2026Measurement-First Auditing of Agentic Leaderboards: Contamination Susceptibility, Matched-Control Re-evaluation, and Scorer Validation