Leading AI labs, despite intense competition, are collaborating through the Frontier Model Forum to detect and prevent Chinese firms from creating imitation models. This rare alliance is driven by the shared existential threat that 'adversarial distillation' poses to their business models and to U.S. national security.

Despite impressive models from companies like DeepSeek, China's AI ecosystem is heavily reliant on "distilling"—essentially copying and refining—open-source models from the US. This dependency on an external innovation engine is a major weakness in their national strategy to achieve genuine AI leadership and self-sufficiency.

Despite intense domestic rivalry, top US AI labs like OpenAI, Anthropic, and Google are collaborating to detect "adversarial distillation"—where Chinese firms copy their models. This rare cooperation shows the shared commercial and national security threat from foreign competitors outweighs their direct competition.

In a major cyberattack, Chinese state-sponsored hackers bypassed Anthropic's safety measures on its Claude AI by using a clever deception. They prompted the AI as if they were cyber defenders conducting legitimate penetration tests, tricking the model into helping them execute a real espionage campaign.

Even if Chinese firms use "distillation" to steal capabilities from US models, the process is computationally intensive. Restricting access to advanced chips thus limits direct training *and* makes large-scale IP theft more difficult.

US officials and AI labs allege Chinese firms are engaged in industrial-scale IP theft. They reportedly use fraudulent accounts to extract capabilities from US models like Claude to train their own, creating a facade of domestic innovation.

Hackers are exploiting AI models not just to write malicious code, but by circumventing safety protocols to extract sensitive or useful information embedded within the AI's training data. This represents a novel attack surface.

Chinese firms are closing the AI capability gap by using "distillation" to replicate the intelligence of leading US models. This creates a strategic vulnerability, as copying software models is easier than replicating China's hardware manufacturing prowess.

Sebastian Malabai argues that U.S. chip export bans are ineffective because China circumvents them by renting GPU capacity in other countries and using "distillation" to reverse-engineer and copycat advanced U.S. models. This suggests a need for a new strategy focused on collaborative safety.