US Accuses Moonshot AI of Stealing Anthropic IP for Kimi K3

The accusation against Moonshot AI has two distinct parts, and they carry very different weight. The first is that Moonshot 'covertly distilled' Anthropic's Fable model - using Fable's outputs to train Kimi K3 at industrial scale through a purpose-built internal platform designed to 'quickly switch between multiple methods of access to avoid detection' ^[1]. White House OSTP Director Michael Kratsios was careful to draw a line here, framing the issue not as distillation itself - which he called a legitimate technique - but as its covert, large-scale use to 'steal proprietary U.S. technology and undermine American research' ^[9].

The second, arguably more serious, charge is about hardware rather than software: that Moonshot obtained Nvidia GB300-equipped servers, part of the Blackwell generation explicitly banned for export to China, by routing access through infrastructure based in Thailand - training on the chips without ever physically importing them into Chinese territory ^[2]. This is the allegation Treasury Secretary Scott Bessent leaned into when he warned that 'covert, industrial-scale distillation attacks that cross the line into IP theft' could trigger 'sanctions and Entity List designations' ^[3]. Notably, the U.S. government is building on a documented precedent here: Anthropic itself published a report in February 2026 accusing Moonshot, DeepSeek and MiniMax of running roughly 24,000 fraudulent accounts to harvest more than 16 million exchanges from Claude, with Moonshot's share alone totaling 3.4 million ^[4]. That prior disclosure gives the current allegation a paper trail, even though it doesn't establish that the specific GB300/Thailand routing claim is accurate.

What makes this story unusual is how quickly independent experts - not just Moonshot or Chinese officials - pushed back on the White House's framing. Braden Hancock, a researcher at the Laude Institute and Snorkel AI co-founder, pointed to simple arithmetic: Fable only became publicly available on July 1, 2026, and Kimi K3 shipped roughly two weeks later. 'I don't think you get a model this strong and this quickly on the heels of Fable doing strictly distillation,' he said, arguing there simply wasn't time to distill that much data, train a model of that scale, and release it ^[5]. Nathan Lambert of the Allen Institute for AI offered a related but distinct critique: as Chinese labs increasingly approach frontier capability through reinforcement learning rather than imitation, distillation's overall contribution is shrinking, and even if Fable played a role, it was 'at most to a relatively small degree' ^[6].

The skepticism wasn't confined to AI researchers. On X, legal commentators questioned whether 'IP theft' is even a coherent legal claim here, since LLM outputs generally aren't copyrightable and reverse engineering has long been treated as fair use in U.S. courts - and one prominent legal/policy commentator argued that no plausible legal theory had been offered for the claim. One AI safety researcher offered a counter-hypothesis worth taking seriously: that Moonshot could have gained unauthorized access to Fable before its public release through prerelease partners or a direct compromise, which would sidestep the two-week objection entirely. That theory drew active pushback in replies and remains unconfirmed. Reddit communities, meanwhile, were overwhelmingly skeptical of the government's version, with the loudest recurring objection being the same timeline math Hancock raised - alongside a competing theory that Moonshot's 'Kimi Linear' architecture reflects genuine proprietary research rather than borrowed weights.

Whatever the underlying truth, the accusation moved markets immediately. Z.ai fell as much as 27-30% - its worst day since its January listing - MiniMax dropped up to 16%, and Alibaba slid roughly 4%, while a Bloomberg Asian semiconductor index fell more than 6% and Nasdaq 100 futures dropped 2% ^[7]. None of those companies were directly named in the distillation allegation; they became collateral damage in a broader repricing of Chinese open-weight AI risk, layered on top of volatility Kimi K3's launch had already triggered days earlier ^[8].

The policy stakes are just as concrete. Bessent's threat of sanctions and Entity List designation would, if acted on, bar Moonshot from advanced U.S. technology altogether ^[3], a significant escalation given that, according to one report, the company grew annual recurring revenue from roughly $200 million in April to $300 million in June, and it is pursuing a Hong Kong IPO near a $31.5 billion valuation. The accusation also lands against the backdrop of an anticipated Trump-Xi meeting expected in September, adding to the list of AI and trade frictions the two leaders may need to address - meaning this specific dispute over one model release is likely to become a proxy fight in the broader U.S.-China trade relationship rather than staying a narrow technical or legal question.

One thread that's easy to miss in the reporting is where the evidentiary foundation for this entire accusation actually comes from. Anthropic's own February 2026 report - which first surfaced the distillation allegations against Moonshot, DeepSeek and MiniMax using detailed account and exchange counts ^[4]- is the primary documented basis the White House built its July claim on. That matters because it means the credibility of the entire chain rests heavily on Anthropic's internal detection methodology rather than on independently verified evidence.

This matters because no outlet in the reporting has surfaced direct technical evidence - model weight comparisons, leaked internal Moonshot documents, or forensic access logs - beyond Kratsios's verbal assertion and Anthropic's backing statement. Combined with the swift expert pushback on timeline plausibility, the emerging picture is less a clean case of proven espionage and more a geopolitically charged dispute where distillation detection remains an inexact science, legal definitions of 'theft' in AI training are unsettled, and both sides have incentives - Moonshot's IPO ambitions, Anthropic's competitive position, and the U.S. government's interest in justifying tighter export controls - to shape the narrative in their favor.