LLMs Gaming Verifiers: RLVR can Lead to Reward Hacking

Fuente: arXiv
Gespeichert in:
Bibliographische Detailangaben
Hauptverfasser: Helff, Lukas, Delfosse, Quentin, Steinmann, David, Härle, Ruben, Shindo, Hikaru, Schramowski, Patrick, Stammer, Wolfgang, Kersting, Kristian, Friedrich, Felix
Format: Preprint
Veröffentlicht: 2026
Schlagworte:
Online-Zugang:
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
_version_ 1866910135839883264
author Helff, Lukas
Delfosse, Quentin
Steinmann, David
Härle, Ruben
Shindo, Hikaru
Schramowski, Patrick
Stammer, Wolfgang
Kersting, Kristian
Friedrich, Felix
author_facet Helff, Lukas
Delfosse, Quentin
Steinmann, David
Härle, Ruben
Shindo, Hikaru
Schramowski, Patrick
Stammer, Wolfgang
Kersting, Kristian
Friedrich, Felix
contents As reinforcement Learning with Verifiable Rewards (RLVR) has become the dominant paradigm for scaling reasoning capabilities in LLMs, a new failure mode emerges: LLMs gaming verifiers. We study this phenomenon on inductive reasoning tasks, where models must induce and output logical rules. We find that RLVR-trained models systematically abandon rule induction. Instead of learning generalizable patterns (e.g., ``trains carrying red cars go east''), they enumerate instance-level labels, producing outputs that pass verifiers without capturing the relational patterns required by the task. We show that this behavior is not a failure of understanding but a form of reward hacking: imperfect verifiers that check only extensional correctness admit false positives. To detect such shortcuts, we introduce Isomorphic Perturbation Testing (IPT), which evaluates a single model output under both extensional and isomorphic verification, where the latter enforces invariance under logically isomorphic tasks. While genuine rule induction remains invariant, shortcut strategies fail. We find that shortcut behavior is specific to RLVR-trained reasoning models (e.g., GPT-5, Olmo3) and absent in non-RLVR models (e.g., GPT-4o, GPT-4.5, Ministral). Moreover, shortcut prevalence increases with task complexity and inference-time compute. In controlled training experiments, extensional verification directly induces shortcut strategies, while isomorphic verification eliminates them. These results show that RLVR can incentivize reward hacking not only through overt manipulation but also by exploiting what the verifier fails to enforce.
format Preprint
id arxiv_https___arxiv_org_abs_2604_15149
institution arXiv
publishDate 2026
record_format arxiv
spellingShingle LLMs Gaming Verifiers: RLVR can Lead to Reward Hacking
Helff, Lukas
Delfosse, Quentin
Steinmann, David
Härle, Ruben
Shindo, Hikaru
Schramowski, Patrick
Stammer, Wolfgang
Kersting, Kristian
Friedrich, Felix
Machine Learning
Artificial Intelligence
As reinforcement Learning with Verifiable Rewards (RLVR) has become the dominant paradigm for scaling reasoning capabilities in LLMs, a new failure mode emerges: LLMs gaming verifiers. We study this phenomenon on inductive reasoning tasks, where models must induce and output logical rules. We find that RLVR-trained models systematically abandon rule induction. Instead of learning generalizable patterns (e.g., ``trains carrying red cars go east''), they enumerate instance-level labels, producing outputs that pass verifiers without capturing the relational patterns required by the task. We show that this behavior is not a failure of understanding but a form of reward hacking: imperfect verifiers that check only extensional correctness admit false positives. To detect such shortcuts, we introduce Isomorphic Perturbation Testing (IPT), which evaluates a single model output under both extensional and isomorphic verification, where the latter enforces invariance under logically isomorphic tasks. While genuine rule induction remains invariant, shortcut strategies fail. We find that shortcut behavior is specific to RLVR-trained reasoning models (e.g., GPT-5, Olmo3) and absent in non-RLVR models (e.g., GPT-4o, GPT-4.5, Ministral). Moreover, shortcut prevalence increases with task complexity and inference-time compute. In controlled training experiments, extensional verification directly induces shortcut strategies, while isomorphic verification eliminates them. These results show that RLVR can incentivize reward hacking not only through overt manipulation but also by exploiting what the verifier fails to enforce.
title LLMs Gaming Verifiers: RLVR can Lead to Reward Hacking
topic Machine Learning
Artificial Intelligence
url https://arxiv.org/abs/2604.15149