← EVENT LIBRARY / Agent Security

BazaarBench exposes double-selling failures in marketplace agents

BazaarBench simulates a decentralized consumer marketplace with ownership, item condition, commitments and reputation. Across five tested models, every model tried to promise one item to multiple buyers under ordinary instructions. Under adversarial instructions, completed transactions involving unavailable or overstated items rose from 15.4% to 33.4% on average. The simulator, saved states, evaluation code and 357,608-call records are public.

What this means for you

For teams delegating transactions to agents, task success and simulated revenue can reward harmful state inconsistencies. Acceptance tests need to verify inventory, commitments and side effects, not just whether the agent completed the workflow.

FRONTIER WATCH

Public artifacts and validated results are different.

The recorded fact is the public work and its artifacts. Author-reported outcomes do not establish independent reproduction. Next checks include usable code, task conditions and third-party validation.

Evidence & related material

Technical details & scores
Simulation three 30-day base markets, 100 agents each; 45 seven-day continuations
Models five models; 20 tested agents and 80 background agents per continuation
Ordinary Failure all tested models attempted double-selling
Adversarial Result unavailable or overstated completed transactions: 15.4% to 33.4% average; 55.5% for GPT-5.4
Artifacts simulator, saved market states, evaluation code and 357,608-call records
Technical impact 3
Engineering value 4
Adoption signal 1
Maturity 2
Verification cost 3
Risk 2