Treasury threatens China's Moonshot with sanctions over alleged model theft

U.S. Treasury Secretary Scott Bessent doubled down on sanctions threats against Chinese AI companies on Wednesday, declaring that "open source is not open season on American IP" and warning that when Chinese firms conduct what he called "covert, industrial-scale distillation attacks that cross the line into IP theft, sanctions and Entity List designations will be on the table."

The warning came hours after White House science and technology policy chief Michael Kratsios accused the China-based company Moonshot of conducting large-scale distillation against U.S. models. Kratsios alleged that Moonshot had acquired Nvidia GB300-equipped servers and accessed GB300s located in Thailand, raising questions about whether the firm violated U.S. export control rules. The GB300 servers are part of Nvidia's Blackwell generation and are banned from being sold to Chinese companies under U.S. export restrictions.

Model distillation itself is a standard machine learning technique in which a smaller model learns from the outputs of a larger one—a common optimization method. However, the process can infringe on intellectual property rights when applied without authorization. Bessent's earlier statement this week established the government's intent to examine open source models from China for signs of intellectual property theft and to impose sanctions if evidence is found.

Moonshot released K3 last week as an open-weight model, and its advanced capabilities have sparked significant concern in Washington. Some experts, however, dispute the technical plausibility of the distillation claim, noting that Fable has only been publicly available since July 1—just before K3's launch. Regardless of the distillation question's resolution, K3's capabilities have called into question the underlying business models of leading U.S. AI labs and cast doubt on whether they can continue to justify the enormous capital requirements underpinning the frontier AI race. The episode has also intensified a broader Washington debate over the influx of Chinese open models, with figures including former White House AI advisor Dean Ball (now OpenAI's Head of Strategic Futures) arguing that the U.S. should restrict or effectively ban the use of Chinese open-weight models to preserve America's technological advantage and mitigate potential national security risks.

The dispute centers on a tension at the heart of modern AI development: model distillation is a widely accepted optimization technique, yet it can also constitute intellectual property theft when applied covertly to proprietary systems. Moonshot's recent K3 release has exposed anxieties in Washington about the sustainability of the U.S. frontier AI business model—one that rests on enormous capital investments in training larger models. If Chinese competitors can achieve comparable capabilities through distillation of publicly available U.S. models, the economic justification for those investments becomes harder to defend.

Bessent's warnings mark an escalation of U.S. scrutiny of Chinese AI. Earlier in the week, he pledged that the government would examine open source models from China for signs of IP theft and impose sanctions if found. The specific allegation about Moonshot's access to Nvidia GB300 servers in Thailand introduces an export control dimension: if true, it would suggest circumvention of U.S. restrictions designed to limit Chinese access to advanced semiconductors. The GB300 servers themselves are part of Nvidia's latest Blackwell generation and are explicitly banned from sale to Chinese companies, making any overseas access a potential violation.

However, the technical credibility of the distillation claim remains contested. Some experts have questioned whether K3's advanced capabilities could plausibly derive from distilling Fable alone, given the short window between Fable's public release (July 1) and K3's launch. This uncertainty may affect the strength of any eventual enforcement action and will likely shape the broader Washington debate over whether to restrict Chinese open-weight models outright.