Political risk / Jul 23, 2026 / 4 min
Rent-a-GB300 in Thailand Has a Case File
On July 22, White House science chief Michael Kratsios accused Moonshot AI of training Kimi K3 on Nvidia GB300 clusters accessed in Thailand — exposing a cloud-compute loophole the House voted 369-22 to close in January, but the Senate still hasn't.
Washington finally named the workaround: you don't smuggle Blackwell chips into Shenzhen. You rent the rack in Bangkok.
The accusation: On July 22, White House Office of Science and Technology Policy Director Michael Kratsios posted on X that Moonshot AI — the Chinese lab behind Kimi K3 — "acquired GB300-equipped servers and has accessed GB300s in Thailand, likely to train its AI models." Nvidia's GB300 Grace-Blackwell accelerators are export-controlled and barred from sale to Chinese entities. Thailand is not.
Why it landed: Moonshot dropped Kimi K3 on July 16 — a 2.8-trillion-parameter open-weight model that matched or beat Anthropic's Fable 5 and OpenAI's GPT-5.6 Sol on several benchmarks. U.S. AI stocks sold off. Kratsios paired the hardware charge with a separate allegation that Moonshot "distilled Anthropic's Fable" through a platform built to evade detection. Treasury Secretary Scott Bessent followed with a warning that "sanctions and Entity List designations will be on the table" for industrial-scale IP theft.
The loophole: U.S. export rules restrict shipping advanced AI chips to China. They have not, until now, clearly treated remote cloud access to those same chips as an export. Chinese firms can lease GPU farms in Southeast Asia, the Middle East, or allied nations and train from Beijing. CNBC reported that ByteDance was assembling compute outside China as early as March. Industry analysts have documented similar patterns: INF Tech reportedly rented 2,300 Blackwell GPUs through an Indonesian data center; Tencent secured contracts for 15,000 Blackwell processors via a Japanese provider.
The bill waiting: Congress saw this coming. The Remote Access Security Act (H.R. 2683) passed the House on January 12 by a vote of 369-22. It amends the Export Control Reform Act to let Commerce's Bureau of Industry and Security license and penalize remote access to controlled items — including high-end GPUs accessed via cloud connections from locations other than where the hardware sits. House China Committee Chairman John Moolenaar framed it bluntly: "The CCP's AI ambitions are being fueled by its access to American chips housed in data centers located outside of China." The bill has sat in the Senate Banking Committee since January 13.
Enforcement now: MLQ reported that BIS has opened an investigation into whether Chinese AI companies circumvented chip restrictions by routing workloads through overseas subsidiaries or third-country cloud providers. Kratsios's Thailand allegation gives investigators a named target and a geography. Whether Moonshot violated existing rules depends on who owned the servers, who supplied access, and what licenses were in place — questions export lawyers have been asking since BIS first tried to clarify cloud controls in 2009.
What Moonshot says: China's embassy spokesperson Liu Chang called Kratsios's remarks "entirely groundless" and urged U.S. officials to "stop slandering or belittling the development achievements of China's AI industry." Moonshot has not publicly addressed the GB300 allegation. Kimi K3's open-weight release is scheduled for July 27 — four days after Bessent's sanctions threat.
Who gets squeezed: If RASA becomes law, cloud providers become export-control gatekeepers — screening customers, verifying end-users, and potentially geo-blocking restricted entities. Nvidia, whose chips power the racks Moonshot allegedly accessed, faces a different problem: every enforcement action against a Chinese customer is a sale its hyperscaler landlords may lose. Keegan McBride of the Tony Blair Institute told CNBC the episode "demonstrates just how far ahead the US is on compute" — then added the harder truth: "American compute is the foundation for the AI race today," and Beijing is already renting it.
Convina's view: Washington spent six months yelling about model weights and distillation timelines while the compute backdoor stayed wide open. Kratsios just filed the case study the Senate needed — and the House already wrote the fix. The question isn't whether remote GPU access should be an export. It's why a 369-vote bill is still waiting on a committee gavel while Moonshot prepares to drop 2.8 trillion parameters into the wild this weekend.