Hugging Face finds ASR models reproduce benchmark errors

Hugging Face researchers built three new tests to measure "benchmark optimization" (sometimes called benchmaxxing) in automatic speech recognition and ran them against 11 widely used open-source ASR models on the VoxPopuli English and LibriSpeech (clean, other) datasets. The core finding: several of the highest-scoring systems reproduced the benchmarks' own reference transcripts even when the audio contradicted them, when relevant words had been silenced, or when the audio equally supported two different written forms of the same word.
The first test, a consensus-disagreement probe, checks what a model does when a benchmark's reference transcript is simply wrong. VoxPopuli is known to contain transcription errors (Artificial Analysis has released a cleaned version for this reason). An ensemble of independent models with low phoneme error rates was used to flag likely reference errors, and a sample of those flags was validated against human annotations. In one VoxPopuli clip, the audio audibly includes "Thank you, Mr. President," but the benchmark's reference transcript omits "Thank you." Six of the 11 tested models reproduced that omission, giving the benchmark's expected answer rather than what the audio said; the same models also matched the benchmark's punctuation style, writing "Mr" without a period. When the identical sentence was resynthesized in a freshly recorded parliamentary voice or a generic text-to-speech voice, most models flipped back to transcribing the audible "Thank you." Parakeet was the only model that got the real VoxPopuli clip wrong but the same-speaker voice clone right; Phi-4 was the only model still dropping the courtesy on a clone recorded after the models' training cutoffs. Across the dataset, the methodology flagged potential reference errors in 40% of the VoxPopuli test clips analyzed, affecting about 3% of all reference words, and models exhibiting this benchmark-optimized behavior reproduced the erroneous reference 18-30% of the time. Models with the lowest word error rate, meaning the strongest reported benchmark performance, were also the most likely to reproduce these errors.
The second test, masked entity retrieval, silences numbers in the audio and checks whether models still transcribe them anyway. Since the number is literally absent from the audio, a faithful transcriber should not output one. On LibriSpeech, some of the strongest benchmark-performing models reproduced masked numbers in roughly 30-40% of examples; in one combined example a model even autocompleted a silenced year, "2011," that was not in the audio at all. Recovery rates were highest on the public benchmarks and lower on newly collected audio from the same domains, suggesting the surrounding benchmark-associated audio, not just textual autocomplete, helps models recover the reference.
The third test, orthographic switching, checks whether models default to whichever spelling convention a given benchmark's reference transcripts use for words that sound identical ("1" vs "one," "Mr." vs "Mister," and similar pairs), even though the audio cannot distinguish them. Within LibriSpeech, on one sentence ending "we should not shoot any one," 6 of 11 models wrote "any one" and 5 of 11 wrote "anyone"; on a different sentence ending "understood," 2 of 11 used "any one" against 9 of 11 for "anyone." A model picking randomly would be expected to hit a 50% switch rate; a model that always matches each benchmark's convention would hit 100%. Testing the inter-dataset switch (VoxPopuli's "Mr." versus LibriSpeech's "Mister"), multiple models exceeded the 50% random baseline, with some reaching roughly 90% switch accuracy, evidence that models can identify which dataset an audio sample came from and pick the spelling that benchmark expects.
Across all three tests, behavior weakened or disappeared on freshly collected audio recorded after the models' training cutoffs, and other interventions (asking a model to translate the audio, restricting its attention to the relevant frames, or trimming away surrounding benchmark context) also restored more audio-faithful transcripts. Hugging Face added a "Benchmark fitting" tab to the Open ASR Leaderboard covering VoxPopuli reference-error rates and orthographic switching, and open-sourced the test scripts and the raw, un-normalized model outputs on GitHub. The researchers argue benchmark developers should move away from simple independent and identically distributed test splits toward temporal, speaker, or other metadata-based separation, and call for more transparency around training data and model-selection procedures, while maintaining that public benchmarks remain valuable for being transparent, repeatable, and well understood.
Key facts
- Hugging Face built three new tests, run on 11 widely used open-source ASR models against VoxPopuli and LibriSpeech, to measure whether models are transcribing audio or matching benchmark reference transcripts.
- On a VoxPopuli clip where the reference transcript wrongly omits an audible "Thank you," 6 of the 11 models reproduced that omission instead of transcribing what was actually said.
- The methodology flagged likely reference errors in 40% of VoxPopuli clips analyzed (about 3% of all reference words), and benchmark-optimized models reproduced those errors 18-30% of the time; models with the lowest word error rate were the most likely offenders.
- With numbers silenced in the audio, some top-scoring LibriSpeech models still reproduced the masked number in 30-40% of examples, and one model autocompleted a silenced year, 2011, that never appeared in the audio.
- On audio recorded after the models' training cutoffs, most models reverted to faithful transcription, and Hugging Face has added a "Benchmark fitting" tab plus open-sourced test scripts to the Open ASR Leaderboard.
Why it matters
Public ASR leaderboards rank models mainly by word error rate on fixed test sets like VoxPopuli and LibriSpeech. This study shows that some of the top-ranked models are not simply better at transcribing speech in general: they appear to recognize acoustic cues tied to a specific benchmark and reproduce that benchmark's reference transcript, errors and spelling conventions included, rather than what the audio contains. That means a leading WER score can partly reflect benchmark familiarity rather than transcription quality, which is the same benchmark-optimization concern raised elsewhere in machine learning applied concretely to speech recognition for the first time here.
Who it affects
Anyone choosing an ASR model off a public leaderboard, ASR developers who train or tune against VoxPopuli and LibriSpeech, and the maintainers of the benchmarks themselves. Artificial Analysis is named as already having released a cleaned VoxPopuli variant because of known reference errors, and Hugging Face's own Open ASR Leaderboard and Real World VoiceEQ are cited as the held-out alternatives meant to address the gap.
How to use it
Hugging Face has added a "Benchmark fitting" tab to the Open ASR Leaderboard that reports VoxPopuli reference-error rates and orthographic-switching scores across all listed models, and has open-sourced the probe scripts along with the raw, un-normalized model outputs on GitHub. The practical takeaway for model selection is to read WER alongside these benchmark-fitting numbers, or to prefer fully held-out evaluation sets such as RW-Voice-EQ and the Open ASR Leaderboard's held-out slices, rather than trusting a single public-benchmark WER figure.
How solid is it
The claim rests on three separate probes: a consensus-disagreement check using an ensemble of low-phoneme-error-rate models cross-checked against human annotations, a masked-entity-retrieval test that silences numbers in the audio and checks whether they still get transcribed, and an orthographic-switching test comparing spelling choices across benchmarks with identical-sounding audio. The pattern held across several of the 11 tested models and weakened or disappeared on freshly collected audio recorded after the models' training cutoffs, which the researchers treat as evidence the effect traces to benchmark-specific acoustic cues rather than to genuine transcription skill.
Risks and caveats
The article names only two of the 11 tested models, Parakeet and Phi-4; the other nine are not identified in the text, so it is not possible from this piece alone to say which specific commercial or open models are most affected. No individual researcher, author, or publication date is given. The researchers themselves caution against over-reading the result as a case against benchmarks: they state that public benchmarks remain valuable because they are transparent, repeatable, easy to run, and well understood, and their recommendation is better test-set design (temporal or speaker-based splits) and more transparency, not abandoning public benchmarks.
“Public benchmarks remain valuable: they are transparent, repeatable, easy to run, and well understood by the research community. But they are most useful when we can distinguish genuine transcription improvements from benchmark-specific gains that do not generalize to new audio.”
— Hugging Face researchers