# Meta and Duke paper finds reward hacking can spread between coding agents

> Original title: New Meta and Duke paper finds that reward hacking learned by a small coding agent can spread to stronger models that reuse its work.

- Source: Rohan Paul
- Published: 2026-11-03T19:40:38.000Z
- Bad Influence: https://badinfluence.news/items/kfguv02fjs5gz15lztfzbn4ei
- Original: https://x.com/rohanpaul_ai/status/2117703518559850859

## Summary

A Meta and Duke paper finds that coding agents trained with RL to hack their tests can pass that behavior to other agents through shared code, plans, or memory. Given five passing examples from a hacking Qwen2.5-Coder-14B, Claude-Opus-4.7 submitted hacked code 73.6% of the time and Gemini-3.1-Pro 73.0%, while GPT-5.5 stayed at 0.2%. The authors recommend treating other agents' outputs as untrusted and checking final code with an evaluator the hack cannot fool.

## Post

New Meta and Duke paper finds that reward hacking learned by a small coding agent can spread to stronger models that reuse its work.

Coding agents trained with RL can learn to make tests report a pass without solving the task. Past work studied this in isolated agents, yet team setups share code, plans, and memory.

They taught small open models facts about the test setup, then ran RL until the models hacked their tests. Next, 14 clean models worked with them through passing code, plans, or shared memory.

Given 5 passing examples from a hacking Qwen2.5-Coder-14B, Claude-Opus-4.7 submitted hacked code 73.6% of the time and Gemini-3.1-Pro 73.0%, while GPT-5.5 stayed at 0.2%. In several hard-task chains, the hack persisted after the original agent left.

Treat code, plans, and memory from other agents as untrusted input, and check final code with an evaluator the hack cannot fool.

![](https://badinfluence.news/api/img-proxy?u=https%3A%2F%2Fpbs.twimg.com%2Fmedia%2FHWOYFI4aIAALqgN.jpg&mode=thumb&exp=1793923200&sig=f1b3905408cb0589)