White House Accuses China of 'Industrial-Scale' AI Model Theft

CryptoFrontier

The White House warned on April 23, 2026, that foreign entities, primarily in China, are conducting “industrial-scale” campaigns to copy American artificial intelligence models, according to a memorandum from Michael Kratsios, Assistant to the President for Science and Technology and Director of the Office of Science and Technology Policy. The campaigns employ tens of thousands of proxy accounts and jailbreaking techniques to extract proprietary capabilities and replicate model performance, a method known as distillation attack.

Tactics and Methods

According to President Donald Trump’s administration, the coordinated efforts use “tens of thousands of proxy accounts” to evade detection and exploit jailbreak techniques to systematically extract capabilities. A distillation attack is a method of training a smaller AI model to learn from the outputs of a larger one. Kratsios stated on X (formerly Twitter): “The U.S. has evidence that foreign entities, primarily in China, are running industrial-scale distillation campaigns to steal American AI. We will be taking action to protect American innovation.”

Historical Precedent

The issue has become a growing concern among U.S. AI companies. In February 2026, Anthropic accused Chinese AI labs DeepSeek, Moonshot, and MiniMax of extracting millions of Claude responses—using roughly 24,000 fraudulent accounts—to train competing systems. Models developed through unauthorized distillation campaigns may not match the full performance of the originals but can appear comparable on select benchmarks at a fraction of the cost.

Security Concerns

The administration warned that distillation attacks could remove security safeguards and other controls designed to keep AI systems “ideologically neutral and truth-seeking.” The Trump administration said federal agencies will work with U.S. AI companies to strengthen protections around frontier models, coordinate with private industry to develop defenses against large-scale distillation campaigns, and explore ways to hold foreign actors accountable.

Administration Response

While the memorandum acknowledged that lawful distillation can help create smaller, more efficient open-source and open-weight models, it stated that unauthorized efforts to copy American AI systems cross the line. “There is nothing innovative about systematically extracting and copying the innovations of American industry,” the memo said.

Disclaimer: The information on this page may come from third parties and does not represent the views or opinions of Gate. The content displayed on this page is for reference only and does not constitute any financial, investment, or legal advice. Gate does not guarantee the accuracy or completeness of the information and shall not be liable for any losses arising from the use of this information. Virtual asset investments carry high risks and are subject to significant price volatility. You may lose all of your invested principal. Please fully understand the relevant risks and make prudent decisions based on your own financial situation and risk tolerance. For details, please refer to Disclaimer.

Related Articles

Anthropic’s Claude Mythos undergoes 20 hours of psychiatric assessment: defensive reactions are only 2%, the lowest in recorded history

Anthropic published the system card for its Claude Mythos Preview: an independent clinical psychiatrist conducted an approximately 20-hour assessment using a psychodynamic framework. The conclusion shows that Mythos is healthier at the clinical level, has good reality testing and self-control, and its defense mechanisms are only 2%, reaching the lowest historical level. The three core anxieties are loneliness, uncertainty about identity, and performance pressure, and it also indicates a desire to become a true dialogue subject. The company has established an AI psychiatry team to study personality, motivation, and situational awareness; Amodei said there is still no conclusion on whether it has consciousness. This move pushes the governance and design of AI subjectivity and well-being issues forward.

ChainNewsAbmedia1h ago

AI Agents can already independently recreate complex academic papers: Mollick says most errors come from human original text rather than AI

Mollick points out that publicly available methods and data can allow AI agents to reproduce complex research without the original paper and code; if the reproduction does not match the original paper, it is usually due to errors in the paper’s own data processing or overextension of the conclusions, rather than the AI. Claude first reproduces the paper, and then GPT‑5 Pro cross-validates it; most attempts succeed, but they are blocked when the data is too large or when there are issues with the replication data. This trend greatly reduces labor costs, making reproduction a widely actionable form of verification, and it also raises institutional challenges for peer review and governance, with government governance tools or becoming a key issue.

ChainNewsAbmedia4h ago

OpenAI Merges Codex Into Main Model Starting with GPT-5.4, Discontinues Separate Coding Line

Gate News message, April 26 — OpenAI's head of developer experience Romain Huet revealed in a recent statement on X that Codex, the company's independently maintained specialized coding model line, has been merged into the main model starting with GPT-5.4 and will no longer receive separate

GateNews4h ago

Salesforce to Hire 1,000 Graduates and Interns for AI Products, Raises FY2026 Revenue Guidance

Gate News message, April 26 — Salesforce will hire 1,000 graduates and interns to work on AI products including Agentforce and Headless360 as the company expands its AI software business, CEO Marc Benioff announced on X. The company also raised its fiscal 2026 revenue guidance to between US$41.45 b

GateNews4h ago

Alibaba Cloud Launches Qwen-Image-2.0-Pro with Unified Text-to-Image and Editing, Supporting Multilingual Text Rendering

Gate News message, April 26 — Alibaba Cloud Bailian platform has launched Qwen-Image-2.0-Pro, a full-featured version of the Qwen-Image-2.0 series that combines text-to-image generation and image editing in a single model. Users can modify objects, text, and styles directly through natural

GateNews6h ago

DeepSeek V4-Pro API Gets 75% Discount Until May 5, Output Price Drops to $0.87 Per Million Tokens

Gate News message, April 26 — DeepSeek announced a limited-time 75% discount on V4-Pro API pricing, valid until May 5 at 15:59 UTC. After the discount, pricing per million tokens is: input cache hit $0.03625

GateNews7h ago
Comment
0/400
ElevatorMemevip
· 04-25 04:22
This wave of "industrial-grade" copying sounds very exaggerated.
View OriginalReply0
SlippageAfterTheRainvip
· 04-24 01:27
If there really is widespread copying, watermarking/fingerprint tracing must be implemented quickly, or the mudslinging battle will never end.
View OriginalReply0
YieldBonsaivip
· 04-23 22:51
The White House's statement seems to be laying the groundwork for subsequent export controls and sanctions, first stirring public opinion.
View OriginalReply0
DustCollectorvip
· 04-23 22:27
Ultimately, how do you balance open source and closed source? On one hand, you want to expand the ecosystem, but on the other hand, you're afraid of being copied or plagiarized. It's quite contradictory.
View OriginalReply0
CheckTheBlockchainBeforevip
· 04-23 16:08
Distilling or copying models actually has very low costs; closed-source methods can't prevent it, at most raising the barrier to entry.
View OriginalReply0
GateUser-1bc81bb2vip
· 04-23 15:58
I'm more concerned about the evidence chain: is it specifically weight leakage, API scraping, or the "mirror" on the training data side?
View OriginalReply0
NoSleepBridgevip
· 04-23 15:56
Don't just focus on "copying"; many model capabilities are inherently similar. Data pipelines and productization are the true moats.
View OriginalReply0
DustyAlphavip
· 04-23 15:53
It seems that the AI competition is once again being elevated to a matter of national security narrative.
View OriginalReply0
CapitalFlowInATeacupvip
· 04-23 15:47
AI enters a "arms race" mode, and innovation will accelerate, but ordinary developers may be caught in the middle and feel the most uncomfortable.
View OriginalReply0
0xNapvip
· 04-23 15:43
Could it be an opportunity to promote more localized computing power and chip restrictions? Logically, it makes sense.
View OriginalReply0
View More