Sign InOpen Brain
AI EngineerVideoSource Linked

When Will The Benchmaxxing Plague End? — Nick Heiner, Surge AI

Nick Heiner argues that leaderboard gains can diverge from useful agent behavior through contamination, weak verifiers, reward hacking, and test conditions that users cannot inspect.

AI Engineer · Aug 2, 2026
Open Source Open MarkdownOpen JSON
Source Summary

Heiner attributes benchmark gaps to contamination, reward hacking, broken tasks, weak quality control, and incentives to optimize visible scores. Examples include undisclosed testing of **27 models**, contradictory prompts, and verifiers that check only fragments of the requested behavior.

Practical Implication

For coding-agent choices, treat leaderboard position as one input rather than the decision. Prefer evaluations with a **private holdout set**, expert-authored tasks, disclosed conditions, and **two-way prompt-verifier alignment** that checks every requirement without rewarding unrelated shortcuts.

Agent-Ready Context
Heiner attributes benchmark gaps to contamination, reward hacking, broken tasks, weak quality control, and incentives to optimize visible scores. Examples include undisclosed testing of **27 models**, contradictory prompts, and verifiers that check only fragments of the requested behavior.

For coding-agent choices, treat leaderboard position as one input rather than the decision. Prefer evaluations with a **private holdout set**, expert-authored tasks, disclosed conditions, and **two-way prompt-verifier alignment** that checks every requirement without rewarding unrelated shortcuts.

High-quality human evaluation is expensive and difficult to scale; the talk's writing benchmark uses **thousands of professional writers**. The examples support stronger scrutiny, but they do not establish one universal ranking method for every agent workflow.
Connected Context · Feed7 Judgment

This consolidates prior benchmark warnings into a selection rule: coding-agent rankings are weak evidence unless hidden data, task quality, test conditions, and prompt-verifier alignment resist contamination and shortcuts. It strengthens private tasks and final-state grading, while adding that rigorous human evaluation is costly and still does not yield one universal ranking method.

DeepSWE: A Contamination-Resistant Coding Benchmark — James Shi, DatacurveDeepSWE implements part of the proposed remedy through original tasks and runtime separation, while its limited task mix illustrates why contamination resistance alone cannot establish general usefulness.Rethinking Environments for Long-Horizon Work — Rayan Garg, Theta SoftwareTheta’s final-state and trajectory inspection directly addresses the weak-verifier problem, where checking only fragments can reward incomplete or shortcut solutions.Demystifying evals for AI agentsAnthropic’s small, failure-derived eval sets offer a practical complement to the talk’s costly large-scale human evaluation, without claiming a universal leaderboard.Teaching AI to Find Real Vulnerabilities — Prof. David Brumley, BugcrowdBugcrowd’s deterministic exploit effects exemplify the demanded prompt-verifier alignment by grading the requested security outcome rather than an agent’s claimed success.
Context Map
benchmarkcoding#benchmark-integrity#agent-evals#agent-reliability
Uncertainty
High-quality human evaluation is expensive and difficult to scale; the talk's writing benchmark uses **thousands of professional writers**. The examples support stronger scrutiny, but they do not establish one universal ranking method for every agent workflow.