Beijing summons Nvidia over alleged backdoors in China-bound AI chips

July 31, 2025 TH Author

China’s internet watchdog has hauled Nvidia in for a grilling over alleged backdoors in its H20 chips, the latest twist in the increasingly paranoid semiconductor spat between Washington and Beijing.

Nvidia was recently given the thumbs-up to resume sales of its made-for-China H20 AI chips after Washington quietly reversed an earlier export ban on the silicon. The Trump administration originally imposed the ban in April over fears the kit could wind up powering Chinese military systems.

However, Nvidia’s return to the Chinese market looks set to come with strings attached, as Beijing has once again sharpened its scrutiny of foreign silicon slipping past the firewall.

In a statement issued Thursday, the Cyberspace Administration of China (CAC) claimed there were “serious security vulnerabilities” in Nvidia’s high-performance computing chips, which are widely used for AI workloads.

The warning presumably comes in response to the introduction of the Chip Security Act, which calls for mandatory GPS-style tracking to be embedded in every AI chip exported from the United States. According to the CAC’s statement, American AI experts had already revealed that Nvidia’s chips contain mature “tracking and positioning” and “remote shutdown” technologies, fueling fears in Beijing that such features could be exploited to monitor or disable Chinese systems.

The CAC said it had interviewed Nvidia to discuss suspected backdoor vulnerabilities and demanded that the US chip giant “explain the security risks” and provide “relevant supporting materials.” The agency cited provisions in the country’s Cybersecurity Law, Data Security Law, and Personal Information Protection Law as the legal basis for the intervention.

“In order to maintain the network security and data security of Chinese users, the State Internet Information Office interviewed Nvidia on July 31, 2025, and asked Nvidia to explain the security risks of the backdoor vulnerabilities in the H20 chips sold to China and submit relevant supporting materials,” reads a version of the CAC’s statement translated by The Register.

The H20 chip is part of Nvidia’s China-specific product line, cobbled together after Washington tightened the screws on semiconductor exports in 2023 to limit China’s access to high-end AI chips that could be used in military or surveillance applications.

Nvidia designed the H20 chip to sidestep US trade restrictions by dialing down performance just enough to dodge the Commerce Department’s red lines, while still offering enough grunt to keep Chinese firms interested. It’s based on Nvidia’s Hopper architecture, the same tech underpinning its high-end H100 chips, but with trimmed-down specs to keep Uncle Sam happy.

Despite the restrictions, an estimated $1 billion worth of Nvidia AI chips, including banned models like the B200, H10, and H200, wound up in China’s black market last week, with vendors hawking ready-to-rack kits straight out of a “fell off a truck” story.

A spokesperson ar Nvidia told The Register: “Cybersecurity is critically important to us. Nvidia does not have ‘backdoors’ in our chips that would give anyone a remote way to access or control them.” ®