Nvidia says its AI chips do not have ‘kill switches’ after China claim

Nvidia Denies ‘Kill Switch’ Claims in AI Chips Amid China’s Security Concerns

Santa Clara, California, August 5, 2025 – Nvidia Corp. has firmly rejected accusations from China’s Cyberspace Administration of China (CAC) that its H20 artificial intelligence (AI) chips contain “kill switches” or backdoors that could allow remote deactivation or tracking. The controversy, sparked by a CAC summons on July 31, 2025, follows the Trump administration’s decision to reverse a ban on H20 chip exports to China, highlighting escalating tensions in the U.S.-China AI race.

China’s Allegations and Nvidia’s Response

On July 31, the CAC claimed Nvidia’s H20 chips posed “serious security risks,” alleging that U.S. lawmakers had called for tracking and remote shutdown capabilities in exported AI chips. The regulator demanded Nvidia provide documentation to address these concerns, citing potential vulnerabilities that could allow the U.S. to control or disable the chips remotely.

In a blog post on August 5, Nvidia’s Chief Security Officer, David Reber, stated, “NVIDIA GPUs do not and should not have kill switches or backdoors.” Reber emphasized that such features would violate cybersecurity principles, creating vulnerabilities exploitable by hackers or hostile actors, and undermine trust in U.S. technology. He referenced the 1990s Clipper Chip debacle, where U.S. attempts to embed backdoors in encrypted communications led to security flaws, as a cautionary example.

Context: U.S. Policy and Chip Smuggling

The controversy stems from a May 2025 proposal by U.S. Representative Bill Foster (D-Ill.), who introduced the Chip Security Act. The bill, supported by bipartisan lawmakers including Raja Krishnamoorthi (D-Ill.) and John Moolenaar (R-Mich.), seeks to mandate location-tracking and remote shutdown mechanisms in AI chips like Nvidia’s to prevent unauthorized use, particularly in China. Foster, a physicist with chip design experience, argued that such technology exists and is necessary to counter smuggling, with China reportedly accessing $1 billion worth of banned Nvidia chips, including H100 and B200 models, since April 2025.

Nvidia has acknowledged that it cannot fully trace its chips’ destinations due to complex global supply chains and black-market trade through Southeast Asian markets. A Financial Times report detailed how Chinese firms, including DeepSeek, have acquired restricted chips like the H100, fueling advanced AI development despite U.S. export controls imposed since 2022.

The Trump administration’s reversal on July 15, 2025, allowing Nvidia to resume H20 exports after trade talks securing Chinese rare-earth mineral supplies, has intensified scrutiny. Critics, including former Biden administration officials and Senator Elizabeth Warren (D-Mass.), warn that H20 sales could bolster China’s AI capabilities, potentially enhancing military applications like autonomous weapons or surveillance systems.

Implications and Industry Impact

Nvidia’s H20, designed to comply with U.S. export restrictions by offering reduced processing power but high memory bandwidth, is critical for AI inference tasks. Chinese firms prefer it for its CUDA software ecosystem, despite Huawei’s domestic Ascend 910B chips reportedly surpassing H20 in computing power. The CAC’s probe, coupled with a thriving underground repair industry in Shenzhen servicing banned H100 and A100 chips, underscores China’s reliance on Nvidia’s technology and the challenges of enforcing export controls.

Nvidia CEO Jensen Huang has argued that export controls have backfired, spurring Chinese innovation and costing Nvidia $8 billion in lost sales, including a $4.5 billion writedown on unsold H20 inventory. He advocates for U.S. chip dominance in China to maintain global AI leadership, a stance criticized by national security experts who prioritize restricting China’s access to advanced technology.

Posts on X reflect polarized sentiment. Some, like @Jkylebass, warn that H20 sales could enhance China’s military capabilities, citing applications in drones and AI models like DeepSeek. Others note China’s soaring demand for H20 chips, with Jefferies estimating a need for 1.8 million units against Nvidia’s 600,000–900,000 stockpile.

Conclusion

Nvidia’s denial of “kill switch” capabilities seeks to reassure China, a key market contributing $17 billion to its revenue last fiscal year, while navigating U.S. pressures to curb technology transfers. The CAC’s concerns, amplified by U.S. legislative proposals, highlight the geopolitical stakes of AI chip exports. As China bolsters its domestic chip industry and exploits smuggling loopholes, the U.S. faces challenges in balancing economic interests with national security, with Nvidia caught in the crossfire.

Sources: CNBC, Asia Times, Reuters, The New York Times, Financial Times, Wccftech, Bloomberg, posts on X

Leave a Comment