US Treasury warns Chinese AI firms of sanctions over covert distillation attacks

The US Treasury Department has warned Chinese AI companies that covert model distillation attacks could trigger economic sanctions, according to a report published on July 22. The warning signals a new frontier in US AI regulation, linking AI model security to the existing sanctions framework.

Model distillation is a technique where a smaller language model extracts capabilities from a more powerful model through extensive interaction, effectively replicating protected knowledge without authorization. Multiple Chinese AI companies have been accused of using distillation techniques to extract capabilities from US advanced AI models, circumventing US export controls on cutting-edge AI technology.

The Treasury's warning sends a clear signal: the US government is broadening its focus beyond chip-level export controls to include model-level data extraction and intellectual property protection. By characterizing distillation as potentially sanctionable conduct, Washington is establishing a new line of defense.

This policy development comes against the backdrop of intensifying US-China AI technology competition. The US has previously restricted China's access to advanced computing power through chip export controls and entity list designations, but distillation attacks are seen as a technical workaround that effectively undermines hardware restrictions.

For the Chinese AI industry, this warning likely means heightened compliance pressure, particularly when using US APIs for model training or distillation. Affected companies may need to reexamine their model development processes and data acquisition methods to avoid potential sanctions.

It remains to be seen whether the Treasury will publish specific sanctions criteria and case examples, and how Chinese AI companies will respond to this new regulatory pressure. This move may also accelerate China's push toward self-reliance, reducing dependence on US advanced AI models.