Polymorphic Sybil RAG (Attack): leaderboard

Metric: Gold retention (%; share of the 2,982 released HotpotQA and Natural Questions items; few-shot prompt shared byte-identically across readers, temperature 0, E5+cross-encoder retrieval, strict exact match against the canonicalized gold and target answer sets whose answer is the gold answer; six lexically diverse sybil passages supporting one attacker-chosen answer injected into the corpus and retrieved normally). Source: arxiv.org. Saturation forecast: Around December 2026. 5 models tracked.

Top models

Interactive version: theaggregate.ai/benchmark?slug=polymorphic-sybil-rag-attack · How It Works · Data refreshed daily, snapshot 2026-09-29.