# Report: DeepSeek, Kimi, MiniMax and Ling weights carry an export-controlled Nvidia Blackwell fingerprint

Canonical: https://theagenticweekly.com/news/chinese-ai-models-blackwell-gpu-fingerprint · Evidence: Tested · First seen: 2026-11-13 00:52 UTC · Source published: not stated by the source · Brief published: 2026-11-13 13:08 UTC · Updated: 2026-11-13 13:08 UTC · Author: Agentic Weekly

> A Nov 12, 2026 report by Will DePue (Unemployment Labs) says the published weights of six models from DeepSeek, Moonshot AI, MiniMax and Ant Group were initialized on Nvidia Blackwell GPUs, which need a US license for China. It shows the chip class that made the starting weights, not where the chips were or that any law was broken.

Models in this brief: [Kimi K3.1 Pro](https://theagenticweekly.com/models/kimi-k3-1-pro)

## What happened

- **Reported.** Will DePue's Nov 12 report says six models read as Blackwell-initialized: DeepSeek-V4-Flash and MiniMax-M3 (148 SMs, B200/B300) and DeepSeek-V4-Pro, Kimi K3, Kimi K3.1-Pro and Ling-3.1-flash (152 SMs, GB200/GB300).
- **Reported.** The same labs' earlier models read as Hopper (132 SMs): DeepSeek-V3, Kimi K2 and K2.5, MiniMax-M2.7 and Ling-3.0-flash. The report says Qwen, GLM, Tencent, Xiaomi and StepFun models it could read also show Hopper.
- **Reported.** Method: PyTorch's GPU random-number fill lays out a seed's values by thread count (2,048 per SM), and embedding rows for tokens never seen in training keep those starting values. The report says it searched about 6 trillion seed and layout combinations.
- **Tested (CPU replay).** We ran the author's public replay script: it rebuilt the untouched rows for five models and returned the claimed SM count for each, with seed+1 controls near zero. Rows we pulled from Hugging Face matched the repo's copies byte for byte.
- **Reported.** The report estimates about 12,000 Blackwell GPUs across five final training runs (range 7,000 to 22,000) and says it is "not confident" in those figures; it revised them upward on Nov 12.
- **Not addressed.** The report includes no response from DeepSeek, Moonshot AI, MiniMax, Ant Group, Nvidia or the Commerce Department, and we found none.

## What we checked vs what is the author's claim

Tested here means one narrow thing: the public replay reproduces the author's numbers on rows that really are in the published Hugging Face weights. It does not mean we confirmed which hardware trained the models. The SM-to-chip mapping, the GPU runs and the hardware conclusions are the author's.

Each claim, its label and who says so (sources read Nov 13, 2026)

| Claim | Label | Who says so |
| --- | --- | --- |
| Untouched embedding rows in five models match one seed at 132, 148 or 152 SMs, and seed+1 matches nothing | Tested (CPU replay) | Our run of [macrogrants/checkpoint-forensics](https://github.com/macrogrants/checkpoint-forensics); also [peterjliu/checkpoint-forensics-repro](https://github.com/peterjliu/checkpoint-forensics-repro) |
| 148 SMs means B200/B300 and 152 means GB200/GB300 | Reported | [Report](https://unemploymentlabs.com/checkpoint-forensics); the third-party repro says it did not check this and that public spec pages disagree |
| A B300 reproduced DeepSeek-V4-Flash's rows bit for bit and a rented GB200 reproduced Kimi K3's; an H100 reproduced none of V4-Flash's | Reported | [Report and repo README](https://github.com/macrogrants/checkpoint-forensics) |
| AMD MI300X in two-way partition mode also has 152 compute units; excluded for V4-Flash, called very unlikely for the rest | Reported | [Report](https://unemploymentlabs.com/checkpoint-forensics) |
| About 12,000 Blackwell GPUs and over half a billion dollars across the runs | Reported estimate | [Report](https://unemploymentlabs.com/checkpoint-forensics), which says it is not confident in it |
| Senior OpenAI and Anthropic researchers independently verified the result | Unverified | The author's X thread; no reviewers are named |

## What this means for export controls (our reading)

If the fingerprint holds, it is the first public evidence drawn from the labs' own released files rather than leaks or official statements. US officials and press reports had already alleged Blackwell use by DeepSeek and Moonshot, according to the report, but without technical evidence anyone could re-run.

It does not settle the legal question. Weights can be created on rented chips outside China, and the report says itself that its findings do not establish where the chips were, how access was obtained, or whether export controls were violated. The story lands the day after Democrats opened a probe into Nvidia H200 export licenses, so expect it to be cited in that fight.

## Why it matters if you build on these models

Nothing changes in the weights you download, and the report makes no claim about model quality or safety. The practical risk is policy: open-weight models that become the subject of export-control or procurement rules can be restricted for some customers, so teams in regulated industries may want to note which models in their stack are named.

## Hard questions still unanswered

- Where were the Blackwell systems physically located, and who owned or rented them?
- Did training stay on the hardware that created the starting weights, or only initialization?
- Will any of the four labs, or Nvidia, say what hardware these runs used?
- Will someone with GB200 access re-run the Kimi K3 and DeepSeek-V4-Pro checks on stock PyTorch, as the repo's gpu_check.py allows?

## In the source's words

> "The fingerprint identifies how the weights were created and supports, without proving, the inference that Blackwell also performed the training."
> (Will DePue, Unemployment Labs report, Nov 12, 2026, https://unemploymentlabs.com/checkpoint-forensics)

> "Notably, our findings provide technical evidence of access to advanced computing hardware, but do not establish where the chips were located, how access was obtained, or whether export controls were violated."
> (Will DePue, Unemployment Labs report, Nov 12, 2026, https://unemploymentlabs.com/checkpoint-forensics)

> "It does not show where the chips were, who owned them, or that the whole training run used them."
> (peterjliu/checkpoint-forensics-repro README, independent CPU reproduction, https://github.com/peterjliu/checkpoint-forensics-repro)

## What we have not verified

- We did not run anything on a GPU; the B300, GB200 and H100 results are the author's.
- Which chips have 148 and 152 SMs is taken from the report; we did not check it on hardware.
- We did not check DeepSeek-V4-Pro or Kimi K3.1-Pro, the 24 known-hardware cases, or the AMD exclusion.
- The GPU-count and cost estimates rest on the author's assumptions about efficiency, tokens and run length, which no lab has published.
- The claim that OpenAI and Anthropic researchers verified the result comes from the author's X thread; no reviewers are named.
- No lab, Nvidia or the Commerce Department has responded in what we read.

## Timeline

- Source published: not stated by the source
- First seen by our watcher: 2026-11-13 00:52 UTC (via Watcher: Hacker News front page (item 4484b7eb9d40); written from the Unemployment Labs report and its code repository, plus a third-party CPU reproduction)
- Brief published: 2026-11-13 13:08 UTC

## Sources

- [Unemployment Labs (Will DePue): Top Chinese Frontier AI Models Carry the Fingerprint of Export-Controlled NVIDIA Blackwell GPUs (Nov 12, 2026)](https://unemploymentlabs.com/checkpoint-forensics) (primary source) (fetched 2026-11-13)
- [macrogrants/checkpoint-forensics: the report's code and preserved rows (GitHub)](https://github.com/macrogrants/checkpoint-forensics) (primary source) (fetched 2026-11-13)
- [peterjliu/checkpoint-forensics-repro: independent CPU reproduction (GitHub)](https://github.com/peterjliu/checkpoint-forensics-repro) (fetched 2026-11-13)
- [Hacker News discussion](https://news.ycombinator.com/item?id=50474883) (fetched 2026-11-13)

## Related

- [Earlier: Democrats probe Nvidia H200 China export licenses](https://theagenticweekly.com/news/nvidia-h200-china-exports-democrats-investigation)
- [Earlier: Jensen Huang resigns as Nvidia CEO](https://theagenticweekly.com/news/jensen-huang-resigns-nvidia-ceo-colette-kress-interim)
- [Kimi K3.1 Pro: specs, price and alternatives](https://theagenticweekly.com/models/kimi-k3-1-pro)
- [Breaking news briefs](https://theagenticweekly.com/news/breaking)
- [All news briefs](https://theagenticweekly.com/news)
- [New AI models this week](https://theagenticweekly.com/models/this-week)

## How to cite

Agentic Weekly, "Report: DeepSeek, Kimi, MiniMax and Ling weights carry an export-controlled Nvidia Blackwell fingerprint", published 2026-11-13 13:08 UTC, https://theagenticweekly.com/news/chinese-ai-models-blackwell-gpu-fingerprint
