Blacklisted Chinese military-linked university bought Nvidia H200 chips, records show

Key Points

1. Northwestern Polytechnical University bought two Nvidia H200 chips last month despite a US export blacklist, procurement records show
2. The university, tied to missile and military aircraft research, has been on the Entity List since 2001
3. The purchases expose how Chinese resellers and rented server access blunt Washington's advanced-chip controls

The latest:

Two of Nvidia’s most capable AI chips were bought last month by a Chinese university with deep People’s Liberation Army ties, according to an October 21 procurement record reviewed by Reuters. Northwestern Polytechnical University paid 874,700 yuan, or about $123,000, for the H200 processors. It acquired them from a domestic supplier, not from Nvidia.

Details:

• The buyer: Northwestern Polytechnical University, based in Xian, belongs to China’s Seven Sons of National Defense group and researches military aircraft, missiles and satellites. The US Commerce Department added it to the Entity List in 2001 over alleged missile-proliferation activity, tightening the rules in 2019 to a policy of denial for most controlled US technology.
• The route: The chips were bought for the university’s management school from Shaanxi Bosuan Network Technology, a domestic intermediary, rather than directly from Nvidia. The H200 requires US export licences normally denied to blacklisted institutions. Reuters said it could not determine contact details for the supplier.
• Rented compute: The university also secured access to H200 and other restricted Nvidia processors through five contracts for rented computing capacity from Chinese companies this year. Its cybersecurity school awarded two seven-month contracts in January, worth 441,700 and 441,000 yuan, each covering servers holding eight H200 chips.
• The workloads: Those January contracts covered fine-tuning AI models and reinforcement-learning training. The university rented servers containing eight A100 and eight A800 chips, both barred from export to all Chinese entities. In April, another institute paid 375,000 yuan for computing services requiring at least 24 A100 chips for structural and fluid-dynamics simulations.
• A wider market: A Reuters review of 26 Chinese procurement and corporate records from this year found universities and research institutions buying restricted Nvidia chips or renting Nvidia-powered computing through domestic suppliers. Shenzhen University bought three H100 processors for 769,800 yuan in September. Wuhan University of Technology bought an H100 server for 355,000 yuan in June.
• Defence links: Beihang University, another of the Seven Sons of National Defense, bought four A800 processors for 489,000 yuan in April; it conducts research for military aviation and space programmes. Procurement announcements in July and September named suppliers providing H800 and A800 computing services to the University of Chinese Academy of Sciences, one listing H800 access at 10 yuan per chip-hour.
• Policy gap: The Trump administration began allowing some H200 exports to China case by case in January, but that did not lift the separate restrictions on Entity List organisations. The January licensing rules also require safeguards preventing blacklisted entities and military end-users from remotely accessing chips exported under the policy.
• Washington pressure: Nvidia chief executive Jensen Huang faces growing scrutiny over lobbying for looser China rules, following reports alleging he was targeted by a Chinese spying operation. Three Republican congressional committee chairmen have requested a briefing with Huang on November 18 over his reported contacts with an alleged Chinese intelligence operative.
• No comment: Northwestern Polytechnical, Nvidia and the Commerce Department’s Bureau of Industry and Security, which oversees export controls, did not respond to requests for comment, nor did the other universities named in the records. The records offered scant information about where the processors originated or where the rented servers operated.

Background:

Reuters has previously reported that Chinese institutions obtained restricted Nvidia chips embedded in servers made by Super Micro Computer, Dell and Gigabyte through domestic resellers, and documented an underground market sourcing chips from overseas inventories and third-country intermediaries.

Between the lines:

The records point to two separate enforcement problems. Outright purchases through intermediaries like Shaanxi Bosuan show physical chips reaching blacklisted buyers, while the five rental contracts suggest restricted compute can be accessed without any hardware transfer. Huang argues continued sales preserve US technological leadership; lawmakers counter that H200-class access accelerates weapons design. The January safeguards against remote access speak directly to the second route.

What’s next

The November 18 congressional briefing request to Huang is the nearest fixed date. Watch whether the Bureau of Industry and Security opens an enforcement action against the named Chinese suppliers, and whether Congress advances chip-tracking requirements.

Source: