前 OpenAI 研究员称在六个中国 AI 模型中发现 Nvidia Blackwell 指纹

The Decoder：AI News· Maximilian Schreiner·2026-11-13 23:21· 1 小时前AI 评分72

Former OpenAI researcher says he found Nvidia Blackwell fingerprints hidden inside six Chinese AI models

AI 导读

前 OpenAI 研究员 Will DePue 发布取证分析，称 DeepSeek、月之暗面、MiniMax 和蚂蚁集团的六个 2026 年 4 月后发布的模型带有 Nvidia Blackwell 芯片的初始化权重指纹。

正文 · 原文

Nov 13, 2026

Nano Banana Pro prompted by THE DECODER

AI researcher Will DePue says a forensic analysis has turned up the first technical evidence that leading Chinese AI labs have access to Nvidia's latest Blackwell hardware despite US export controls. He says senior researchers at OpenAI and Anthropic have already checked the method.

According to a forensic investigation by Will DePue, Chinese AI companies DeepSeek, Moonshot AI, MiniMax, and Ant Group are using Nvidia's export-controlled Blackwell GPUs. DePue played a key role at OpenAI in building the Sora and Sora 2 video models as well as GPT-4o, o3, and GPT-5 before founding the nonprofit research group Unemployment Labs.

His analysis, he says, provides the first technical evidence of this access. US officials and news outlets had suspected that DeepSeek and Moonshot AI were using Blackwell chips but never published proof. DePue wrote on X that senior researchers at OpenAI and Anthropic have already independently checked and confirmed his findings. According to DePue, six Chinese models released since April 2026 carry the distinct signature of Nvidia's Blackwell generation, while earlier models such as DeepSeek-V3 and Kimi K2.5 show traces of Nvidia's older Hopper generation.

The evidence comes directly from the published language models. An AI model consists of billions of numerical values called weights. Before training starts, PyTorch, the standard software framework, fills these empty slots with random numbers generated from a starting value called a seed. To distribute this massive amount of data quickly, the GPU splits the work across its individual compute cores. Because different chip models have different core counts, the filling process produces a characteristic pattern, according to the report. Older Hopper chips such as the H100 and H800 use 132 compute cores, while the newer Blackwell chips use exactly 148 or 152 cores depending on the model (B200/B300 or GB200/GB300).

Training then adjusts these values millions of times, but some slots for unused words or symbols keep their initial random values. Even in heavily trained parts of the model, a faint statistical echo of the initial distribution survives, according to DePue. He says he worked the pattern backward and reproduced the results for DeepSeek-V4-Flash and Kimi K3 exactly on real Blackwell chips. He has published the verification code on GitHub.

Training runs costing more than half a billion dollars

The analysis maps DeepSeek-V4-Flash and MiniMax-M3 to B200 or B300 chips (148 cores). DeepSeek-V4-Pro, Kimi K3, Kimi K3.1-Pro, and Ant Group's Ling-3.1-flash show, according to the analysis, the 152-core pattern of Nvidia's liquid-cooled GB200 or GB300 flagship rack systems. DePue says chance can be ruled out statistically and that the method correctly identified all 24 control models with known hardware, including Meta's Llama 3.1 (H100).

DePue's report estimates that the five training runs he examined required about 12,000 Blackwell GPUs combined, as much computing power as roughly 30,000 older H100 chips. Kimi K3 alone required an estimated 4,500 Blackwell processors over about 70 days, and DeepSeek-V4-Pro about 3,000. At a unit price of about $70,000, each of those clusters would cost $200 million to $300 million, and all five systems together more than half a billion dollars.

The findings also align with analysis from Dylan Patel, chief analyst at SemiAnalysis. In an interview with Sequoia Capital, Patel said DeepSeek-V3's model architecture was still specifically tailored for Nvidia's Hopper chips, while DeepSeek-V4's architecture was built for Blackwell GPUs and Huawei's Ascend chips. According to DePue's report, models from other Chinese labs, including Alibaba's Qwen3.8 and those from Zhipu, Tencent, Xiaomi, and StepFun, still show only Hopper signatures, while Meituan's LongCat-2.0 points to Huawei hardware.

The fingerprint doesn't prove a legal violation

Strictly speaking, the method shows only which hardware initialized the weights, though the training itself very likely ran on the same systems. The only other technical explanation would be an AMD MI300X, which is also restricted, artificially throttled so it produces the same pattern. DePue says he ruled out AMD for DeepSeek-V4-Flash using tiny rounding differences between the chips.

The data doesn't reveal where the GPUs are or who owns them, according to the investigation. Because Chinese companies can rent computing capacity at data centers outside China, the report says its technical evidence shows access to Nvidia's top hardware but does not by itself prove physical smuggling or a violation of US export law.

AI News Without the Hype – Curated by Humans

Subscribe to THE DECODER for ad-free reading, a weekly AI newsletter, our exclusive "AI Radar" frontier report six times a year, full archive access, and access to our comment section.

Subscribe now

• Full access to every article on THE DECODER
• No ads
• Join the comments and community discussions
• A weekly AI news recap via mail
• 6x/year: "AI Radar" — deep dives on the AI topics that matter most
• Daily AI news, always up to date
• Our full ten-year archive
• Covered by a team with 10+ years in AI

来源：The Decoder：AI News · the-decoder.com