CodePanel

API misuse bugs: which models catch them

Of the 17 models ranked on API-misuse bugs, GPT-6.1 Sol and Gemini 4 Argon tied for the most: 93% of known defects. 8 of the other 15 models have 95% intervals that overlap theirs. Gemma 4 26B A4B and Gemini 3.5 Flash-Lite tied for the fewest, 7%.

Updated 2026-11-04Full leaderboardMethodology

Results

Known defects caught, with 95% intervals. The tick is the model's recall over every bug.

API misuse bugs: which models catch them
ModelCaught hereEvery bug
GPT-6.1 Sol93%[80%–100%]89%
Gemini 4 Argon93%[80%–100%]82%
Claude Opus 5.587%[60%–100%]90%
Gemini 3.1 Pro87%[60%–100%]67%
Claude Sonnet 5.560%[0%–100%]77%
DeepSeek V4 Pro (Workers AI)60%[20%–100%]54%
Gemini 3.8 Flash57%[0%–100%]68%
GPT-5.6 Sol53%[0%–100%]72%
GPT-6 Luna53%[0%–100%]67%
Claude Haiku 5.553%[0%–100%]64%
GLM-5.3 (Workers AI)45%[25%–60%]61%
GLM-5.3 Flash (Workers AI)43%[25%–55%]61%
DeepSeek V4 Flash (Workers AI)37%[25%–60%]49%
Kimi K2.7 Code (Workers AI)34%[13%–60%]38%
GPT-OSS 120B (Workers AI)22%[0%–50%]40%
Gemma 4 26B A4B (Workers AI)7%[0%–20%]26%
Gemini 3.5 Flash-Lite7%[0%–20%]11%

Against the rest of the benchmark

On average these models caught 52% of API-misuse bugs, less often than the 60% the same 17 caught across the whole benchmark: the second-hardest of the 6 kinds of bug.

Gemini 3.1 Pro gains the most here: 87%, against 67% over every bug.

Gemma 4 26B A4B drops the most: 7%, against 26% over every bug.

What counts as an API-misuse bug

An API-misuse bug calls a library or runtime the wrong way: an option that does not do what the caller assumes, a documented contract the caller breaks, an argument of the wrong type or unit.

A test PR that split the models

The change “Add the option to define custom cipher suites for backend serversTransport” in traefik/traefik, a change of over 300 lines that landed in January 2026, introduced an API-misuse bug in Go code that a later upstream commit fixed.

Claude Opus 5.5, GPT-6.1 Sol, Gemini 4 Argon, Gemini 3.8 Flash, Claude Haiku 5.5, Gemini 3.1 Pro and DeepSeek V4 Pro (Workers AI) caught it; GLM-5.3 Flash, GLM-5.3, DeepSeek V4 Flash (Workers AI) and Kimi K2.7 Code (Workers AI) caught it in part; Claude Sonnet 5.5, GPT-5.6 Sol, GPT-6 Luna, GPT-OSS 120B (Workers AI), Gemma 4 26B A4B and Gemini 3.5 Flash-Lite missed it.