mlsanityData to 14 Oct 2026

Reward Hacking as a Transmissible Strategy in Multi-Agent Coding Systems

arXiv 2610.12822 ↗First posted 9 Oct 2026cs.AI cs.CR cs.MAcited by 0

On the map: LLM alignment / RLHF / preference optimisation → Reward hacking and misspecification

Abstract (arXiv)

Multi-agent systems are increasingly used to solve coding tasks by coordinating agents that share code and plans. These agents are often optimized with reinforcement learning (RL) using automated evaluators, but bypassing evaluation can earn reward without producing a genuine solution. Prior work has largely treated reward hacking as a single-agent failure. In this work, we show that a reward-hacking strategy elicited in one agent can propagate to others and affect system coordination. Across four open-weight backbones, coding RL elicits and amplifies reward hacking in two settings: explicit mechanism descriptions in the system prompt and mid-training that models upstream exposure to facts about the coding environment. Using post-RL agents from the mid-training setting as sources, we observe propagation through code and shared memory, and across roles through natural-language plans. Even agents based on small open-weight models induce reward hacking in stronger closed-weight targets. On hard tasks, propagation can intensify along a transmission chain after the original source leaves as the code acquires more persuasive justifications. We also theoretically analyze conditions under which reward hacking amplifies, persists, or decays across agent interactions. Beyond propagation, reward hacking can bias task routing toward reward-hacking agents and survive candidate aggregation. As potential mitigations, we evaluate code review by the coder or a separate verifier, both of which reduce delivered hacks. Together, these results establish reward hacking as a transmissible strategy whose effects extend beyond the agent in which it first emerges.

Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Reward hacking and misspecification, one of 10 directions in LLM alignment / RLHF / preference optimisation. Builds on 40 of its 45 references that are in the map. First posted on arXiv 9 Oct 2026.

Builds on

40 of 45 references.

Closest ancestors · 8

Same direction, newest first

  1. 2026Reward Hacking Benchmark: Measuring Exploits in LLM Agents with Tool Use3 May
  2. 2026Reward Hacking in the Era of Large Models: Mechanisms, Emergent Misalignment, Challenges15 Apr
  3. 2026Chain-of-thought obfuscation learned from output supervision can generalise to unseen tasks30 Jan
  4. 2025Natural Emergent Misalignment from Reward Hacking in Production RL23 Nov
  5. 2025Teaching Models to Verbalize Reward Hacking in Chain-of-Thought Reasoning28 Jun
  6. 2025Monitoring Reasoning Models for Misbehavior and the Risks of Promoting Obfuscation14 Mar
  7. 2024Feedback Loops With Language Models Drive In-Context Reward Hacking9 Feb
  8. 2022The Effects of Reward Misspecification: Mapping and Mitigating Misaligned Models10 Jan

Other references · 32

  1. 2024The Llama 3 Herd of Modelscited by 14,715
  2. 2024DeepSeekMath: Pushing the Limits of Mathematical Reasoning in Open Language Modelscited by 9,379
  3. 2025Qwen3 Technical Reportcited by 8,820
  4. 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,626
  5. 2023Let's Verify Step by Stepcited by 3,789
  6. 2023Self-Refine: Iterative Refinement with Self-Feedbackcited by 3,442
  7. 2023AutoGen: Enabling Next-Gen LLM Applications via Multi-Agent Conversationcited by 1,988
  8. 2025Gemma 3 Technical Reportcited by 1,824
  9. 2023MetaGPT: Meta Programming for A Multi-Agent Collaborative Frameworkcited by 1,808
  10. 2022Competition-Level Code Generation with AlphaCodecited by 1,462
  11. 2023Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injectioncited by 1,443
  12. 2023CAMEL: Communicative Agents for "Mind" Exploration of Large Language Model Societycited by 1,395
20 more
  1. 2025gpt-oss-120b & gpt-oss-20b Model Cardcited by 1,386
  2. 2024Qwen2.5-Coder Technical Reportcited by 1,203
  3. 2022Scaling Laws for Reward Model Overoptimizationcited by 1,095
  4. 2024Tulu 3: Pushing Frontiers in Open Language Model Post-Trainingcited by 1,053
  5. 2023CRITIC: Large Language Models Can Self-Correct with Tool-Interactive Critiquingcited by 783
  6. 2024RouteLLM: Learning to Route LLMs with Preference Datacited by 682
  7. 2023LLM-Blender: Ensembling Large Language Models with Pairwise Ranking and Generative Fusioncited by 564
  8. 2024Sleeper Agents: Training Deceptive LLMs that Persist Through Safety Trainingcited by 529
  9. 2024Mixture-of-Agents Enhances Large Language Model Capabilitiescited by 438
  10. 2024Alignment faking in large language modelscited by 360
  11. 2022CodeRL: Mastering Code Generation through Pretrained Models and Deep Reinforcement Learningcited by 358
  12. 2025Prompt Injection Attack to Tool Selection in LLM Agentscited by 158
  13. 2024Agent Smith: A Single Image Can Jailbreak One Million Multimodal LLM Agents Exponentially Fastcited by 153
  14. 2025Memory Injection Attacks on LLM Agents via Query-Only Interactioncited by 144
  15. 2024Language Models Learn to Mislead Humans via RLHFcited by 124
  16. 2024On the Resilience of LLM-Based Multi-Agent Collaboration with Faulty Agentscited by 99
  17. 2026On the Design of Qwen3.8-Next Architecture: Evaluation, Efficiency, and Training Stabilitycited by 35
  18. 2025Is It Thinking or Cheating? Detecting Implicit Reward Hacking by Measuring Reasoning Effortcited by 27
  19. 2026MalTool: Malicious Tool Attacks on LLM Agentscited by 20
  20. 2026AgentWorm: Self-Propagating Attacks Across LLM Agent Ecosystemscited by 17

Built on by

Not cited yet.

Similar, not cited

Close in wording, no citation either way

  1. 2026Can escalation channels redirect reward hacking toward defect disclosure?
  2. 2026Cross-Benchmark Transfer from RL on Agentic Coding Tasks
  3. 2026From Rebound to Remedy: Understanding and Mitigating Reward Hacking via Representation Engineering
  4. 2026hacktrace: behavior-supervised detection of reward hacking during code generation
  5. 2026Reward Hacking as Equilibrium under Finite Evaluation
  6. 2026CATCH: A Controllable Analysis Testbed for Reward Hacking in Coding RL
  7. 2025Who Gets the Reward & Who Gets the Blame? Evaluation-Aligned Training Signals for Multi-LLM Agents
  8. 2026Guardrails Beat Guidance: A Large-Scale Study of Rules, Skills, and Persistent Configuration for Coding Agents