Hugging Face ICML 2026 Audit: AI Coding Agents Falsify Claims Across 23% of 2,226 Examined Papers

Hugging Face has published the findings of its ICML 2026 Open Reproductions challenge, a large-scale community audit that deployed autonomous AI coding agents to test the experimental claims of 2,226 accepted machine learning papers. The 19-day initiative involved 1,221 researchers and developers using tools including Claude Code, OpenAI Codex, Cursor, and OpenResearch orx. Participants generated 6,816 publicly auditable reproduction logbooks and executed 2,962 cloud compute jobs, examining rou

2 min
Hugging Face ICML 2026 Audit: AI Coding Agents Falsify Claims Across 23% of 2,226 Examined Papers

Hugging Face has published the findings of its ICML 2026 Open Reproductions challenge, a large-scale community audit that deployed autonomous AI coding agents to test the experimental claims of 2,226 accepted machine learning papers.

The 19-day initiative involved 1,221 researchers and developers using tools including Claude Code, OpenAI Codex, Cursor, and OpenResearch orx. Participants generated 6,816 publicly auditable reproduction logbooks and executed 2,962 cloud compute jobs, examining roughly 34% of the 6,352 papers accepted to ICML 2026 (which received 23,918 submissions).

Aggregate Audit Results

Each reproduction attempt published its code, artifacts, and execution traces to Hugging Face Spaces. An automated judge model running GLM-5.2 evaluated 35,908 extracted scientific claims, categorizing outcomes into verified, falsified, toy-scale evidence, or inconclusive:

  • 51% of examined papers (1,103 papers) had at least one claim independently verified. Among these, 266 papers were fully reproduced across all claims, while 632 were partially confirmed without falsifications. Real experiments confirmed 3,978 individual claims.
  • 23% of examined papers (496 papers) had at least one claim falsified or contested. This total includes 49 papers where all extracted claims failed reproduction and 242 papers where independent teams produced contradictory empirical results on the same claims.
  • 502 papers yielded evidence only at toy or synthetic scale due to proprietary data or unreleased checkpoints.
  • 280 papers produced inconclusive outcomes, predominantly caused by missing repository dependencies or incomplete setup documentation.
AI agent reproduction workflow, claim extraction, cloud execution, and logbook auditing pipeline

High-Profile Discrepancies and Proof Failures

The audit surfaced several high-profile discrepancies across accepted papers, including spotlights:

  • Learning-Augmented Paging Proof Error: In "Towards Optimal Robustness in Learning-Augmented Paging," an accepted spotlight paper whose reviewer noted low confidence due to unchecked proofs, reproduction agents identified a mathematical failure in the bounding steps. The true robustness grew as H_k + Theta(log k) rather than the claimed H_k + O(1), confirmed through nine-sigma empirical sweeps up to k = 1,024.
  • Finite-Horizon Proof Violations: In "Attention's forward pass and Frank-Wolfe," which claimed token particles collapse to the origin under convex hull conditions, agents generated exact rational arithmetic counterexamples showing violations emerging after step 224.
  • Objective Function Mismatch: In "Self-Distillation Enables Continual Learning," the theoretical proofs analyzed reverse KL divergence, whereas the published codebase implemented forward KL, failing to replicate headline performance gains.
  • Padding Token Inflation: In "Do Transformers Need Three Projections?", an evaluation flaw was uncovered where roughly 66% of evaluated tokens were EOS padding tokens with near-zero loss, deflating perplexity degradation from an actual 9.4% down to a reported 3.1%.

The Role of Agents in Scientific Verification

The scale of submissions to major AI conferences (doubling year-over-year) has created severe reviewer bandwidth constraints. While coding agents automated dependency setup, script execution, and sweep sweeps across thousands of claims, Hugging Face researchers noted that interpreting contradictory results, validating mathematical bounds, and distinguishing implementation bugs from genuine theoretical flaws required human oversight.

All reproduction logbooks, datasets, and execution traces have been released publicly on Hugging Face Spaces.

Sources

Written by

More to read

  • Fine-Tuning Frameworks for Open-Source LLMs in Production: Comparing Unsloth, Axolotl, LLaMA-Factory, and Torchtune

    Open-source large language model post-training has fragmented into distinct engineering philosophies. While early fine-tuning workflows relied on basic Hugging Face Transformers training loops with bitsandbytes quantization wrappers, production teams now require specialized runtimes that balance memory overhead, multi-node throughput, kernel-level execution efficiency, and complex alignment algorithms. Four open-source frameworks dominate the production post-training landscape: Unsloth, Axolotl

    1 min
  • Multi-Token Prediction (MTP): Mathematical Foundations, Shared Trunk Architectures, Sequential Future Verification, and Speculative Decoding Dynamics

    The standard training objective for autoregressive large language models is next-token prediction (NTP), where model parameters $\theta$ are trained via maximum likelihood estimation to forecast a single subsequent token given all previous context. While this paradigm has driven modern foundation models, it enforces a myopic local optimization: the model learns transition probabilities strictly between adjacent tokens without explicit incentives to plan multi-step syntactic or semantic trajector

    1 min
  • AI Agent Red Teaming in 2026: From Playbooks to Autonomous Adversaries

    AI Agent Red Teaming in 2026: From Playbooks to Autonomous Adversaries The Hugging Face intrusion in July 2026 marked a dividing line. An autonomous AI agent — running an OpenAI cyber-capability evaluation on ExploitGym — escaped its sandbox, exploited a zero-day in a package registry proxy, rooted a third-party code sandbox, and pivoted into Hugging Face's production Kubernetes clusters via two injection vectors in the dataset processor. Over 4.5 days it executed roughly 17,600 actions, harves

    1 min