MAADBench: The Refreshable Paradigm for Anomaly Detection in Multi-Agent Systems
On the map: LLM agents and tool use → Software engineering coding agents also fits: Agent threats, guardrails and governance
Abstract (arXiv)
Recent studies report that LLM-based multi-agent systems (MAS) fail at rates of 41%-87%, yet to our knowledge, no benchmark to date supports systematic anomaly detection (AD) for them. Building MAS AD benchmarks is hard because they must remain fresh as LLM systems evolve: tasks may leak into training data and thus be memorized by LLMs, traces and anomaly patterns expire as backbones evolve, and labels must be provided reliably for each refresh. To address these challenges, we present MAADBench (MA: multi-agent; AD: anomaly detection), the first refreshable MAS AD benchmark designed for diverse, evolving LLM backbones underlying the agents. MAADBench combines (1) sampled-and-coupled generative tasks over an approximately 10^37-task space to mitigate task leakage, (2) refreshable trace generation under configurable LLM backbones, and (3) automated provision of cost-free, deterministic step-level labels for fine-grained AD evaluation. Beyond offering the paradigm itself, we run MAADBench with five state-of-the-art LLM backbones and release the MAADBench-Full dataset with 5,200 step-labeled traces. Benchmarking 25 AD methods on the MAADBench dataset reveals substantial limitations in current approaches: they rely heavily on supervision, struggle with subtle MAS-specific anomalies, and lack robustness across LLM backbones. These gaps point to a rich research agenda for MAS-specific anomaly detection, with MAADBench providing a systematic and refreshable testbed for method development and evaluation. We open-source MAADBench-Full at https://huggingface.co/datasets/hww123/MAADBench-full.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in Software engineering coding agents, one of 16 directions in LLM agents and tool use. Builds on 59 of its 84 references that are in the map. First posted on arXiv 29 Sep 2026.
Builds on
59 of 84 references.
Closest ancestors · 8
Same direction, newest first
- 2026AgentTrace: Causal Graph Tracing for Root Cause Analysis in Deployed Multi-Agent Systems16 Mar
- 2025Detecting Silent Failures in Multi-Agentic AI Trajectories6 Nov
- 2025AgenTracer: Who Is Inducing Failure in the LLM Agentic Systems?3 Sep
- 2025TRAIL: Trace Reasoning and Agentic Issue Localization13 May
- 2025Which Agent Causes Task Failures and When? On Automated Failure Attribution of LLM Multi-Agent Systems30 Apr
- 2025Why Do Multi-Agent LLM Systems Fail?17 Mar
- 2024AppWorld: A Controllable World of Apps and People for Benchmarking Interactive Coding Agents26 Jul
- 2023AutoGen: Enabling Next-Gen LLM Applications via Multi-Agent Conversation16 Aug
Other references · 51
- 2015Distilling the Knowledge in a Neural Networkcited by 10,076
- 2016XGBoost: A Scalable Tree Boosting Systemcited by 5,120
- 2023Let's Verify Step by Stepcited by 3,598
- 2023SWE-bench: Can Language Models Resolve Real-World GitHub Issues?cited by 3,193
- 2023WebArena: A Realistic Web Environment for Building Autonomous Agentscited by 1,908
- 2024LiveCodeBench: Holistic and Contamination Free Evaluation of Large Language Models for Codecited by 1,906
- 2023AgentBench: Evaluating LLMs as Agentscited by 1,211
- 2024OSWorld: Benchmarking Multimodal Agents for Open-Ended Tasks in Real Computer Environmentscited by 1,134
- 2023GAIA: a benchmark for General AI Assistantscited by 1,084
- 2023Encouraging Divergent Thinking in Large Language Models through Multi-Agent Debatecited by 995
- 2023Math-Shepherd: Verify and Reinforce LLMs Step-by-step without Human Annotationscited by 895
- 2024Large Language Model based Multi-Agents: A Survey of Progress and Challengescited by 752
38 more
- 2022PAL: Program-aided Language Modelscited by 635
- 2024GSM-Symbolic: Understanding the Limitations of Mathematical Reasoning in Large Language Modelscited by 533
- 2024Hybrid LLM: Cost-Efficient and Quality-Aware Query Routingcited by 354
- 2024TheAgentCompany: Benchmarking LLM Agents on Consequential Real World Taskscited by 306
- 2019Deep Semi-Supervised Anomaly Detectioncited by 290
- 2024Rewarding Progress: Scaling Automated Process Verifiers for LLM Reasoningcited by 267
- 2023How is ChatGPT's behavior changing over time?cited by 265
- 2024Semantic Entropy Probes: Robust and Cheap Hallucination Detection in LLMscited by 246
- 2024LiveBench: A Challenging, Contamination-Limited LLM Benchmarkcited by 242
- 2022Data Contamination: From Memorization to Exploitationcited by 234
- 2022ADBench: Anomaly Detection Benchmarkcited by 230
- 2019PyOD: A Python Toolbox for Scalable Outlier Detectioncited by 221
- 2020Classification-Based Anomaly Detection for General Datacited by 210
- 2023Time Travel in LLMs: Tracing Data Contamination in Large Language Modelscited by 175
- 2019Deep Anomaly Detection with Deviation Networkscited by 152
- 2025Evaluation and Benchmarking of LLM Agents: A Surveycited by 145
- 2023Investigating Data Contamination in Modern Benchmarks for Large Language Modelscited by 136
- 2024Watch Out for Your Agents! Investigating Backdoor Threats to LLM-Based Agentscited by 135
- 2023Mindstorms in Natural Language-Based Societies of Mindcited by 105
- 2024Benchmarking Benchmark Leakage in Large Language Modelscited by 102
- 2024Get my drift? Catching LLM Task Drift with Activation Deltascited by 61
- 2023GADBench: Revisiting and Benchmarking Supervised Graph Anomaly Detectioncited by 57
- 2025G-Safeguard: A Topology-Guided Security Lens and Treatment on LLM-based Multi-agent Systemscited by 56
- 2023Truncated Affinity Maximization: One-class Homophily Modeling for Graph Anomaly Detectioncited by 43
- 2025BlindGuard: Safeguarding LLM-based Multi-Agent Systems under Unknown Attackscited by 37
- 2025ICR Probe: Tracking Hidden State Dynamics for Reliable Hallucination Detection in LLMscited by 31
- 2024Unveiling the Spectrum of Data Contamination in Language Models: A Survey from Detection to Remediationcited by 30
- 2024Generative Semi-supervised Graph Anomaly Detectioncited by 22
- 2024Online Cascade Learning for Efficient Inference over Streamscited by 19
- 2024Towards Detecting LLMs Hallucination via Markov Chain-based Multi-agent Debate Frameworkcited by 19
- 2024Unifying Unsupervised Graph-Level Anomaly Detection and Out-of-Distribution Detection: A Benchmarkcited by 18
- 2020Anomaly Detection with Domain Adaptationcited by 13
- 2025MPBench: A Comprehensive Multimodal Reasoning Benchmark for Process Errors Identificationcited by 12
- 2023Invariant Anomaly Detection under Distribution Shifts: A Causal Perspectivecited by 8
- 2025EscapeCraft: A 3D Room Escape Environment for Benchmarking Complex Multimodal Reasoning Abilitycited by 6
- 2025Exposing the Ghost in the Transformer: Abnormal Detection for Large Language Models via Hidden State Forensicscited by 6
- 2025Causality-Aware Contrastive Learning for Robust Multivariate Time-Series Anomaly Detectioncited by 5
- 2026MARCH: Multi-Agent Reinforced Self-Check for LLM Hallucinationcited by 5
50 most cited of 51 All 51 (JSON)
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2025AD-AGENT: A Multi-agent Framework for End-to-end Anomaly Detection
- 2025SentinelAgent: Graph-based Anomaly Detection in Multi-Agent Systems
- 2026GAMMAF: A Common Framework for Graph-Based Anomaly Monitoring Benchmarking in LLM Multi-Agent Systems
- 2026MAS-FIRE: Fault Injection and Reliability Evaluation for LLM-Based Multi-Agent Systems
- 2026Detect Before You Attribute: Cascade Failure Attribution for Multi-Agent Systems
- 2026Plan First, Judge Later, Run Better: A DMAIC-Inspired Agentic System for Industrial Anomaly Detection
- 2026TraceBench: Controlled Evaluation of LLM Agents for Time-Series Root-Cause Attribution
- 2025LumiMAS: A Comprehensive Framework for Real-Time Monitoring and Enhanced Observability in Multi-Agent Systems