
Unemployment Labs reported that the weights of six models of DeepSeek, Dark Side of the Moon, MiniMax and Ant Group showed Blackwell architecture characteristics, but it could not prove the source of the chip or the violation.
AI-generated summary
The United States has implemented export controls on high-end AI chips to China, restricting the sales of advanced GPUs such as NVIDIA Blackwell. By analyzing the GPU hardware fingerprint of model weights, former OpenAI researcher Will DePue claimed to have discovered that many Chinese AI enterprise models use the Blackwell architecture to initialize weights.
Will DePue, a former research engineer who has participated in the development of OpenAI Sora, GPT-4o and other models, published a survey on the social platform The companies involved include DeepSeek, Moonshot AI, MiniMax and Ant Group. A total of six models were determined to use the Blackwell architecture for weight initialization. Since these high-end chips are subject to U.S. export controls to China, the research results have also drawn attention to how Chinese AI companies obtain computing resources.
Unemployment Labs, a research organization founded by DePue, pointed out in a report that before an AI model can start training, it must first set initial values for billions or even hundreds of billions of parameters. These seemingly random numbers are actually affected by the GPU computing architecture and random seeds (Seed). Different chips have different numbers of computing units, and even if the same seed is used, the parameter arrangement may be different. Some values have not been modified in subsequent training, so they still retain the original arrangement characteristics, forming what researchers call "GPU hardware fingerprints", which can be used to infer the type of hardware that originally established the model weights.
After analyzing about 6 trillion combinations of chip configurations and random seeds, the research team found that the weight characteristics of DeepSeek-V4-Flash and MiniMax-M3 are consistent with Blackwell B200 and B300; DeepSeek-V4-Pro, Kimi K3, Kimi K3.1-Pro and Ant Group Ling-3.1-flash are consistent with the Grace Blackwell GB200 and GB300 series. In comparison, earlier versions such as DeepSeek-V3 and Kimi K2.5, as well as models such as Alibaba Qwen and Zhipu GLM covered by the study, still exhibit the characteristics of the previous generation Hopper architecture. This method mainly identifies the number of computing units of the GPU, such as Hopper's 132 SMs, Blackwell's 148 SMs, and Grace Blackwell's 152 SMs. It cannot further distinguish all chip models in the same group.
In order to confirm the results, DePue used actual NVIDIA B300 and GB200 chips to regenerate the initial weights of the model and successfully reproduced the values retained in DeepSeek-V4-Flash and Kimi K3; after switching to H100 or changing the random seed, the same results could not be obtained. He also announced the verification code and said it had been independently confirmed by senior researchers from OpenAI and Anthropic. Other researchers have publicly stated that they have successfully reproduced some comparison results, but the two companies have not yet seen a formal verification statement. The full scope of application of this method still needs to be tested by more research. However, hardware fingerprints can identify the initialization characteristics of model weights, and cannot directly prove that the same chip is used throughout the model training process, let alone determine whether the device is located in China or an overseas data center. DePue also acknowledged in the report that the evidence was insufficient to determine how the chips were obtained and whether anyone violated U.S. export controls. Although the research results provide new technical clues that Chinese AI companies may have access to regulated high-end GPUs, the actual hardware sources, training locations and procurement methods of the relevant companies have not yet been confirmed.
AI outlook — possibilities, not facts
The U.S. government or regulatory agencies may launch an investigation into the chip procurement of relevant Chinese AI companies
Possible · Within weeks
More independent researchers will verify or question the applicability of GPU hardware fingerprinting methods
Likely · Within weeks

On November 10, the Federal Aviation Administration announced the expansion of the deployment of the AI air traffic management system SMART to 22 control centers across the United States. Three days later, a nationwide flight suspension incident occurred. Officials have not yet confirmed a direct relationship between the two. The accident resulted in the cancellation of more than 1,000 flights and the delay of nearly 10,000 flights. The Secretary of Homeland Security stated that no signs of malicious cyber attacks were found.

American startup Thinking Machines Lab opened the Inkling 2 Small model weight download on November 12. It is licensed by Apache 2.0 and supports up to 1 million token context and multi-modal input. The NVFP4 version requires at least 500GB GPU memory. Taiwanese companies and institutions still need to evaluate data security and risks for use.

The US Federal Bureau of Investigation (FBI) issued a security alert on November 13, stating that the open source AI penetration testing tool ARTEX has been abused by hackers since August this year, attacking multiple industries such as finance, government, national defense, semiconductors, energy and technology. Some intrusions have obtained high-level permissions of enterprise cloud systems in less than 3 hours after locking the target. Taiwan's e-commerce SaaS platform provider 91APP has been attacked by ARTEX since October, which may affect up to 1,329 brands and about 4.8 million consumers, and some personal data may be leaked. The Cyberbiz e-commerce platform and a number of listed companies have also confirmed that they were hacked or had data leaked. The Ministry of Digital Development has issued an information security warning, reminding the public to beware of personal information fraud and calling on companies to check and fix vulnerabilities as soon as possible.

SpaceX launched the Starship giant rocket in Texas, challenging the "double capture" test of fully recovering the first and second stages for the first time. After liftoff, the booster malfunctioned, initiated the automatic abort procedure, crashed into the Gulf of Mexico and exploded, declaring a setback at the first hurdle; however, the spacecraft still successfully advanced towards orbit and strived to return on Saturday to complete mid-air clamping. The mission will deploy 26 Starlink satellites and orbit the earth 15 times at an altitude of approximately 275 kilometers.

Huida CEO Huang Renxun resigned on the 12th, shocking the global technology industry. Counterpoint Research pointed out that the short-term AI chip product route and supply chain cooperation are expected to remain stable, but the strategy of the new management team needs to be observed in the medium and long term. It is predicted that server AI ASIC shipments will surpass GPUs in 2027, and the AI computing market will develop in parallel towards GPUs and customized ASICs.

Lex Fridman, an American technology podcaster, posted on the