The leading open-weight models developed by Chinese companies were trained on Nvidia chips that the US government restricted from shipping to its largest geopolitical rival, a new research effort claims.

The apparently widespread access to Blackwell GPUs among Chinese frontier labs shows the magnitude of the problem facing the leading chip designer. Nvidia CEO Jensen Huang left the company this week after admitting to his affair with Alice Huang, executive of Megaspeed, a company implicated in smuggling Nvidia chips into China. Alice Huang has also been alleged to be an agent of China’s intelligence service.

While Jensen Huang’s relationships with a customer and two employees have drawn the most public interest, Nvidia’s potential corporate liability for export control violations likely factored into its decision to part ways with Huang.

US export controls are intended to protect the country’s leadership in AI capabilities against China, but Huang has long sought to open up that market. Blackwell GPUs are banned from export to China or Chinese-owned firms, while the Trump administration allows Nvidia to export the H200, a less powerful chip, provided shipments take a circuitous shipping route that allows the US to claim a 25% tariff.

Will DePue, a former OpenAI researcher who leads the nonprofit research group Unemployment Labs, analyzed the weights—the unique structure—of large language models released openly by DeepSeek, Moonshot AI, MiniMax and Ant Group. The weights still reflect the configurations of the chips used to train them, and DePue was able to find compelling evidence that the most closely watched models, including Moonshot’s Kimi’s K3 releases and DeepSeek’s V4 models, bear fingerprints from training on Blackwell chips.

White House technology adviser Michael Kratsios said earlier this year that Moonshot had used export-banned Nvidia chips, citing US intelligence sources. Epoch AI, a nonprofit research organization, estimates that about two million advanced chips entered China in 2024 and 2025 through schemes designed to hide their final destination.

That doesn’t mean that these models were trained entirely on Nvidia chips, or that export control laws were necessarily violated; the chips could have been in an offshore data center, which has proven a popular way for Chinese firms to access compute and driven an industrial revolution in Malaysia. Epoch’s data estimates that 275,000 Nvidia AI accelerators were imported to Malaysia in 2024 and 2025.

However, the ostensible goal of the export bans is to prevent exactly that: Chinese AI labs training on the most powerful chips. China hawks have long called for stronger controls on who uses chips, not just who owns them or where they are installed.

“If we care about the U.S. tech edge, it doesn’t make any sense to me that you would not allow Chinese companies to access chips in mainland China or Hong Kong and Macau, but then say, actually, if you just go over to Malaysia, you can do whatever you want,” Sam Bresnick, a researcher at the Georgetown Center for Security and Emerging Technology, told TechCrunch this summer.

Megaspeed, the company led by Alice Huang, has been at the center of that trade for several years through its subsidiary Speedmatrix, and has been the subject of investigations by both the US and Singaporean government. Friday, Bloomberg also reported that a company with links to Alice Huang was involved in smuggling banned Nvidia chips to a data center in Shanghai.

In May, the short-selling research firm Culper published a report arguing that Nvidia had a “China problem” because a significant share of its revenue was driven by Chinese demand, either through remote data centers or smuggling in violation of US law. It detailed Megaspeed’s relationship with Nvidia and alleged that Alice Huang’s companies are backed by Chinese firms that are barred from accessing US chips.

Ironically, short-seller Culper’s bet against Nvidia wasn’t driven by the expectation of a US government crackdown. Instead, it was focused on the Chinese government’s response to the bans, which was to recommit to its domestic chip industry.

If China succeeds, billions of dollars in Chinese demand for Nvidia chips could dry up. Some 600,000 H200 chips are reportedly stockpiled in Hong Kong, awaiting shipment into China. While Chinese companies might want the chips, observers have no consensus on why they’ve haven’t been cleared for import.

Graham Webster, a research scholar at Stanford who focuses on US-China technology policy, said he doesn’t buy the idea that holding the chips back would drive domestic production, since demand for chips is so large. Other theories for the hold-up include preparation for a potential trade deal that would involve importing a large volume of US goods, or concerns about potential surveillance technology in the chips.

For now, US companies have limited obligations to track what their customers do with controlled goods like AI chips. However, Jensen Huang’s personal and professional entanglements with Alice Huang create a much bigger problem for Nvidia if government investigators confirm that chip smuggling took place and that he was aware of it. Nvidia and Huang have both vouched for Megaspeed’s data centers, saying Nvidia officials had visited them to confirm they were legitimate.

The US government’s treatment of Nvidia and Megaspeed is also under scrutiny. Secretary of Commerce Howard Lutnick, who oversees the agencies that licensing chip exports, could reportedly lose his job after reports that his investigators failed to uncover suspicious chip buyers and were too cozy with Nvidia officials.