White House accuses Moonshot of running a covert platform to distill Anthropic's AI into K3

The accusation arrived in a post on X, and it did more than name a Chinese AI lab. A post alleged on Wednesday that Moonshot AI built and operated a covert internal platform to distill Anthropic's frontier model into the company's open-weights K3 release, a 2.8-trillion-parameter Chinese AI model launched on July 16 whose debut was followed by a dip in US AI stocks. The mechanism, not the allegation itself, is the news (The Register).

Distillation is the practice of training one model to mimic another's outputs, a routine part of AI development when done openly. What was described was something else. The platform, the post said, was purpose-built for industrial-scale distillation against US frontier models, with rapid method-switching to avoid detection (Kratsios on X). Treasury Secretary Scott Bessent, posting the same day, said that kind of covert, large-scale activity "crosses the line" from legitimate research into intellectual-property theft. Bessent made the policy direction explicit: sanctions and Entity List designations are on the table. Entity List additions would cut the named parties off from US-origin technology and, in practice, from many allied suppliers.

The post accused Moonshot of accessing Nvidia GB300 accelerators, a chip line the US restricts from sale to China, and pointed specifically to GB300s hosted in Thailand. Thailand is one of several overseas nodes Chinese labs and their suppliers have used to reach compute that is barred at home. The Register has previously documented Anthropic accusing Moonshot, DeepSeek, and Minimax of distillation in February 2026 (The Register, February 2026). The post is the first time a senior US official has publicly named the covert-platform method and tied it to a specific overseas hardware route.

The accusation is a claim, not a finding. As of publication, no public attribution chain, indictment, or technical evidence showing the platform's design, the data flow, or the chip procurement has been laid out. Anthropic has not issued a new statement specific to K3, and Moonshot had not, at last check, posted a public response. Nvidia has not commented on the GB300 allegation. Beijing's standing line is that China does not engage in IP theft, a routine caveat that nonetheless belongs on the page. The BBC's coverage of the dispute echoes the same evidentiary gap from a different angle (BBC).

The framework separates small, transparent distillation, which the White House treats as acceptable, from industrial-scale covert distillation, which it does not. The pairing of a software accusation with a hardware route puts the two under the same export-control umbrella. The Nvidia GB300 angle suggests the next export-control fight may be over overseas compute as much as over chips sold into China.

The mechanism the White House has named exposes its own enforcement gap. The chip export regime was built to slow China's access to leading-edge hardware by controlling sale, not by tracking chips after they leave US jurisdiction. Alleged access through a third country means the policy tool the US has spent two years refining is, on its own, the wrong shape for this allegation. A coherent response would have to combine export licensing, sanctions on the named parties, and bilateral pressure on the transit country, with industry coordination on detection methods. CyberScoop's reporting on the allegation frames the same policy question from the distillation-evidence side (CyberScoop).

What to watch: an Anthropic technical brief on the platform claim, a Moonshot on-record response, an Entity List addition for Moonshot or its suppliers, a US action that names Thailand, and an Nvidia statement on the GB300 routing. Each is a discrete signal. A technical brief and an Entity List filing together would mean the White House is building an enforcement case. Silence from both companies and a Treasury-only statement would mean the X post was the high-water mark.