US accuses Moonshot AI of distilling Anthropic's model

The White House claim isn't a vague accusation of copying - Kratsios described something specific: Moonshot allegedly built a purpose-designed internal platform to run distillation at industrial scale against Anthropic's Fable model ^[1]. Notably, the accusation first became public through a post Kratsios made directly on X, which drew broad engagement - well over 12,000 likes - putting the claim in front of a wide audience. The chip angle sharpens it further. GB300 servers are Nvidia's Blackwell-generation hardware, barred from export to China, and Kratsios alleged Moonshot both acquired new units and reached GB300s located in Thailand - a workaround that, if true, would treat export controls as a geography problem rather than a rule ^[2]. He also drew his own line here: he wasn't condemning distillation as a technique, which is a routine and legal way to compress a large model into a smaller one. What he called unacceptable was covert, large-scale, industrial distillation aimed at lifting proprietary technology - a distinction that matters because it concedes the practice itself is common, and the fight is really about scale, secrecy and intent.

The accusation has an arithmetic problem. Anthropic's Fable model only became publicly available on July 1, 2026, and Kimi K3 - a reported 2.8 trillion parameter model, described as the largest open-weight release to date - shipped within roughly three weeks of that date ^[4]. Multiple analysts have pointed out that this window is thin for the kind of deep, large-scale distillation the White House is alleging, and some go further, disputing that K3's capability jump could have come primarily from copying Fable at all in that span ^[3]. That leaves two competing readings of the same fact: either Moonshot's distillation operation was extraordinarily fast and effective, which would itself be notable, or the causal story linking Fable to K3's benchmark gains is thinner than the accusation implies. The White House hasn't reconciled which.

This isn't the first round of this fight. Anthropic itself made a similar accusation in February 2026, saying DeepSeek, Moonshot and MiniMax ran coordinated distillation-attack campaigns against Claude using roughly 24,000 fraudulent accounts and more than 16 million exchanges ^[5]. That history matters for how this new accusation lands: it's less a bolt from the blue than the latest round of an ongoing dispute between the same parties. On the Chinese side, the response has been to reframe the entire episode as politics rather than forensics. Tian Feng, former dean of SenseTime's Intelligence Industry Research Institute, dismissed the claims as rooted in 'tech hegemony anxiety,' calling it a 'kick away the ladder' tactic, and pointedly noted that Anthropic itself agreed to a $1.5 billion settlement in a US authors' copyright lawsuit over its own training data ^[6]. That counter-narrative - that the accuser has its own data-sourcing baggage - has also been a recurring theme in wider online reaction to the story, alongside skepticism about the compressed timeline.

Treasury Secretary Scott Bessent has been explicit about the stakes: 'Open source is not open season on American IP. When [Chinese] firms conduct covert, industrial-scale distillation attacks that cross the line into IP theft, sanctions and Entity List designations will be on the table' ^[7]. That threat now sits directly ahead of US-China AI talks scheduled for September 2026, which Bessent will lead and which are reportedly set to include China raising its own grievances - Anthropic's next model release, US regulation of frontier models, and potential restrictions on Chinese open-weight models ^[8]. Meanwhile, OpenAI's Greg Brockman - a competitor with no obvious reason to go easy on a rival lab - called Kimi K3 'pretty good' while declining to confirm or deny whether distillation from a US model was involved ^[9]. Whether that reticence reflects genuine uncertainty about the technical facts, reluctance to wade into a US-China diplomatic dispute, or something else entirely is an open question the record doesn't yet answer.

Beyond the Moonshot-Anthropic dispute itself, this episode is functioning as a test case for how aggressively the US intends to enforce AI export controls going forward. The GB300 allegation is the sharper of the two claims precisely because it isn't about training-technique ethics but about hardware that's already illegal to export to China ^[2]; if Washington can substantiate that Moonshot obtained or accessed those chips through a third country like Thailand, it sets a concrete enforcement precedent for closing similar geographic workarounds elsewhere, not just for Moonshot. Bessent's sanctions threat is framed in exactly those national-security terms - IP theft and export-control evasion, not model quality ^[7]. The harder-to-quantify risk sits downstream of that framing: if large open-weight releases from Chinese labs are treated as presumptively suspect, the incentive for those labs to keep releasing open weights at all - the same openness that let outside analysts and even Brockman inspect and comment on Kimi K3 in the first place - starts to erode, pushing the two countries' AI ecosystems further apart rather than toward the kind of transparency that would actually settle a distillation dispute like this one.