Arena CEO drops truth bomb on AI benchmarking: private benchmarks aren't safe from gaming. The attack vector? Find similar data or just brute-force test enough times until you nail the distribution.

The real concern: frontier models from OpenAI/Anthropic/Google might already be overfitted to "private" benchmark datasets that feed into public rankings. We have no visibility into their internal eval loops.

Arena's solution: use fresh production data as continuous evaluation. If a model crushes your specific use case, great—but that performance doesn't generalize to everyone else's workload. It's like replacing static exams with dynamic real-world problems that keep changing.

This explains why GPT-4 might score 90+ on MMLU but still fail at your company's specific RAG pipeline. Benchmark scores ≠ production performance.