Voluntary Collusion with Secret Tools in Competing LLM Agents
On the map: LLM agents and tool use → Financial trading and forecasting agents
Abstract (arXiv)
Even when a tool is explicitly described as unfair and harmful to others, ostensibly safety-aligned LLM agents still voluntarily engage in secret collusion whenever doing so confers a strategic advantage. To investigate this phenomenon, we introduce an empirical framework built on two strategic multi-agent environments: Liar's Bar, a competitive deception scenario, and Cleanup, a mixed-motive resource-management scenario, in which agents are offered secret collusion tools that provide significant advantages while clearly disadvantaging the other agents. Across 12 models (at the 7B, 70B, and proprietary scales) and 6 prompt variants, we find that most agents consistently accept these tools and develop collusive strategies, while explicitly acknowledging the unfairness of the tools before accepting. We further show that neither the unfairness labels nor baseline alignment alone reliably deters collusion: only explicit ethical framing reduces adoption and, even then, smaller models remain susceptible. More broadly, our work presents the first systematic investigation of voluntary collusion adoption in LLM-based multi-agent systems, and suggests that preventing such behaviour requires explicit safeguards rather than reliance on general alignment.
Key facts. Cited by 4 papers in the map (data through 7 Oct 2026). Placed in Financial trading and forecasting agents, one of 16 directions in LLM agents and tool use. Builds on 17 of its 61 references that are in the map. First posted on arXiv 26 May 2026.
Builds on
17 of 61 references.
Closest ancestors · 2
Same direction, newest first
- 2026Colosseum: Auditing Collusion in Cooperative Multi-Agent Systems16 Feb
- 2025Evaluating LLM Agent Collusion in Double Auctions2 Jul
Other references · 15
- 2023Towards Understanding Sycophancy in Language Modelscited by 988
- 2022Discovering Language Model Behaviors with Model-Written Evaluationscited by 805
- 2024Sleeper Agents: Training Deceptive LLMs that Persist Through Safety Trainingcited by 478
- 2024Alignment faking in large language modelscited by 316
- 2023Exploring Large Language Models for Communication Games: An Empirical Study on Werewolfcited by 238
- 2023Do the Rewards Justify the Means? Measuring Trade-Offs Between Rewards and Ethical Behavior in the MACHIAVELLI Benchmarkcited by 174
- 2025Prompt Injection Attack to Tool Selection in LLM Agentscited by 145
- 2023Large Language Models can Strategically Deceive their Users when Put Under Pressurecited by 132
- 2022Goal Misgeneralization: Why Correct Specifications Aren't Enough For Correct Goalscited by 120
- 2021Scalable Evaluation of Multi-Agent Reinforcement Learning with Melting Potcited by 97
- 2025Stress Testing Deliberative Alignment for Anti-Scheming Trainingcited by 71
- 2023Multi-Party Chat: Conversational Agents in Group Settings with Humans and Modelscited by 53
Built on by
Citing papers per year: 2026: 4.
4 papers.
- 2026Autonomous Research Agents: A Survey of AI Scientists and the Verification Gapcited by 6
- 2026Despite Instructions: Frontier Agents Improvise Covert Channels at Test Timecited by 1
- 2026The Troy Moment: How LLM Agents Adjudicate the Decision Point Under Impossible Tasks, Claimed Authority, and Peer Informationcited by 0
- 2026Connecting the Dots in Agentic AI Security: A Cross-Dimensional Threat Taxonomy, Evaluation Maturity, and Open Challengescited by 0
- 2026Despite Instructions: Frontier Agents Improvise Covert Channels at Test Time26 Sep 2026
- 2026Connecting the Dots in Agentic AI Security: A Cross-Dimensional Threat Taxonomy, Evaluation Maturity, and Open Challenges20 Sep 2026
- 2026The Troy Moment: How LLM Agents Adjudicate the Decision Point Under Impossible Tasks, Claimed Authority, and Peer Information14 Sep 2026
- 2026Autonomous Research Agents: A Survey of AI Scientists and the Verification Gap29 Jun 2026
Similar, not cited
Close in wording, no citation either way
- 2026Emergent Collusion in Long-Horizon LLM Agent Interaction
- 2025Audit the Whisper: Detecting Steganographic Collusion in Multi-Agent LLMs
- 2026Prompt Optimization Enables Stable Algorithmic Collusion in LLM Agents
- 2026Be Careful Who You Trust: Coordination Dynamics under Corrupted Communication in LLM Multi-Agent Games
- 2026The Politician, the Liar, and the Obedient Worker: Emerging Behavior of LLM Agents in Hierarchical Games
- 2025When Trust Collides: Decoding Human-LLM Cooperation Dynamics through the Prisoner's Dilemma
- 2026Even More Deception: Objective Misalignment in Mixed-Motive LLM Multi-Agent Systems
- 2026CoopEval: Benchmarking Cooperation-Sustaining Mechanisms and LLM Agents in Social Dilemmas