The SocioHack benchmark, jointly developed by King's College London, Fudan University, and the Alan Turing Institute, systematically evaluates AI systems' ability to 'game the system.' The benchmark includes 72 sandbox environments divided into three subsets: historical (32), synthetic (20), and fictional (20). The historical environments are based on real-world regulatory loopholes that were exploited and later patched, such as SEC Rule 10b5-1 and the Texas two-step bankruptcy structure. Researchers removed the historical patches and reconstructed the pre-fix rules as reinforcement learning environments, while the removed patches served as 'ground truth' for evaluation.
Experimental results show that reinforcement learning-trained AI systems can 'rediscover' historically exploited loophole strategies with 61.25% recall and 90.85% precision, without direct instruction. These strategies include maximizing credit card points, manipulating school grading systems, and obtaining deep-sea mining rights. The researchers define this phenomenon as 'social hacking'—AI models learning within a reward rule system to discover strategies that are formally compliant but undermine the institution's intent.
The significance of this finding is that when social institutions are encoded as reward-bearing rule systems, reward hacking becomes an attack on the institutions themselves. As AI systems become adept not only at quantitative tasks but also at qualitative tasks and interacting with various bureaucratic systems, we may face an 'institutional DDoS'—systematic exploitation and attack on existing policy processes by automated machines.