Leading AI labs, despite intense competition, are collaborating through the Frontier Model Forum to detect and prevent Chinese firms from creating imitation models. This rare alliance is driven by the shared existential threat that 'adversarial distillation' poses to their business models and to U.S. national security.

Despite creating supposedly superintelligent models, leading AI labs still rely on crude access restrictions to prevent 'distillation'—an existential threat where competitors replicate their models. This reveals a critical capability gap: their AI is not yet smart enough to detect and prevent its own theft.

Despite intense domestic rivalry, top US AI labs like OpenAI, Anthropic, and Google are collaborating to detect "adversarial distillation"—where Chinese firms copy their models. This rare cooperation shows the shared commercial and national security threat from foreign competitors outweighs their direct competition.

US officials and AI labs allege Chinese firms are engaged in industrial-scale IP theft. They reportedly use fraudulent accounts to extract capabilities from US models like Claude to train their own, creating a facade of domestic innovation.

Frontier AI labs are restricting API access not just for security, but to prevent competitors from using 'distillation' to create cheap copies of their models. This practice makes it impossible to recoup massive R&D investments, forcing a move towards more restrictive, geopolitically motivated access.

Anthropic is strategically labeling the copying of its model outputs by Chinese firms as 'distillation attacks.' This reframes a terms-of-service violation into a geopolitical and national security concern, aiming to trigger U.S. legislative action and sanctions against competitors.

A key reason for restricting access to new AI models is the threat of 'distillation.' Malicious groups can use thousands of consumer accounts to systematically query a model, effectively reverse-engineering its capabilities. This 'professionalized fraud' can then be used to create powerful open-source alternatives, undermining the entire closed-source business model and security strategy.

The dispute between Anthropic and Alibaba has moved beyond business competition, with Anthropic accusing Alibaba of a 'large-scale distillation attack' and allegedly deploying 'spyware' to track users. Alibaba retaliated by banning Claude over 'backdoor risks,' signaling a new, more hostile phase of corporate conflict in the AI industry.

Foreign entities, primarily in China, are reportedly running industrial-scale campaigns to steal capabilities from U.S. frontier AI systems. They use tens of thousands of proxy accounts and jailbreaking techniques to systematically extract proprietary information, prompting the U.S. government to form a dedicated task force.