Nvidia Chip Loophole Allows Blacklisted Chinese Firms Access to Advanced AI Hardware
<>
An export control gap allowing Chinese AI firms to remotely access advanced Nvidia Blackwell chips is complicating bilateral safety talks.
The Remote Access Loophole in US Export Controls
Current United States export restrictions strictly limit the physical transfer of advanced semiconductors to Chinese entities. However, these rules contain no equivalent prohibition regarding remote access to computing power hosted in third-party jurisdictions.
Tencent holds rental contracts valued in excess of $1.2 billion through Japanese cloud operator Datasection, providing its researchers with operational access to Nvidia B200 processors. Similarly, ByteDance has secured capacity within a 36,000-unit Blackwell GPU cluster managed via a Malaysian cloud operator. Nvidia has confirmed that these specific transactions carry no direct export-control violations under the current regulatory framework.
Concerns regarding infrastructural bypass extend further into regional data center deployment. White House Office of Science and Technology Policy Director Michael Kratsios alleged in July that Moonshot AI utilized an operational facility in Thailand to access Nvidia GB300 chips. According to administration statements, this infrastructure trained Kimi K3, a 2.8-trillion-parameter open-source model that officials claim was distilled directly from an Anthropic frontier system.
The Aivres Compliance Pathway
Inspur Group faced placement on the United States Commerce Department’s Entity List in 2023. Despite this restriction, its American subsidiary, Aivres, remained unlisted. This legal distinction permitted Aivres to procure and legally export hardware equipped with advanced Blackwell chips under existing regulatory parameters.
Data compiled between April 2024 and February 2026 shows that Aivres exported more than $3 billion in computers equipped with Nvidia’s advanced Blackwell processors to Southeast Asian data centers.
In response to these supply chain pathways, the Commerce Department’s Bureau of Industry and Security issued clarifying guidance on May 31, 2026. The agency asserted that export licenses are legally required whenever advanced semiconductors flow to any entity whose ultimate parent organization is headquartered in China or Macau, regardless of the geographic location of the subsidiary. Nevertheless, this guidance did not establish direct restrictions governing remote cloud-based computing access.
Legislative Remedies and the Upcoming Beijing Summit
Closing the remote access gap requires specific statutory changes currently stalled within the United States Congress. The House of Representatives passed the Remote Access Security Act, known as RASA, in January 2026. However, the legislation has faced legislative delays and awaits definitive action in the Senate. Until RASA or similar statutory authority is enacted, the Bureau of Industry and Security lacks the direct legal mandate to prohibit blacklisted Chinese artificial intelligence firms from utilizing overseas Blackwell clusters.
The unresolved regulatory mechanics surrounding cloud leasing agreements form a tense backdrop for the mid-September bilateral discussions in Beijing. Treasury Secretary Scott Bessent leads the American delegation, meeting with Chinese Vice Premier He Lifeng. The formal agenda addresses critical geopolitical vulnerabilities, including artificial intelligence-directed cyberattacks and potential safety frameworks, even as commercial access to advanced silicon continues to evolve faster than statute.
>