- Roko's Basilisk
- Posts
- The Model That Rattled Wall Street
The Model That Rattled Wall Street
Plus: SSI teams with NVIDIA, NVIDIA's security alliance, Altman's singularity claim.
Here’s what’s on our plate today:
🧪 Decoding why one Chinese AI model rattled Washington & Wall Street.
📰 Sutskever's SSI partners with NVIDIA, NVIDIA's open security alliance, and Altman says AI hit the singularity.
🧠 Brain Snack: build your moat around the model, not in it.
🗳️ Poll: is Kimi K3 about theft or commoditization?
Let’s dive in. No floaties needed…

Meet your next hire in as little as five days.
Smart hiring for teams that need strong talent now
Fill key roles faster, without waiting weeks or months for the pipeline to behave.
AI-assisted matching and structured vetting help you find people who fit the role and the team.
Cut time and cost with a process built for scale, not endless back-and-forth.
*This is sponsored content

How owning AI deployment expands your career
Across product, ops, and CX teams, a new kind of role is taking shape: the person responsible for making AI actually work, day to day. In this roundtable, three people living this shift share what it's really like: Simone Santiago Broad (Yoco), Yelva Espinoza (Zumba Fitness), and Fin's Dave Lynch. You'll hear how they carved out these roles, what the job looks like across industries, the skills they'd hire for, and the challenges they're tackling right now.
Watch the full conversation on demand.
*This is sponsored content

The Laboratory
TL;DR
The accusation: The White House claims Moonshot AI trained Kimi K3 on Anthropic's most capable model, and Treasury has floated sanctions. No public evidence has been produced, and Moonshot has said nothing.
The timing problem: The Anthropic model in question was reachable for roughly 18 days before K3 shipped, which researchers doubt is long enough to train a system that size on copied answers.
Everyone does it: Learning from another model's outputs is routine. OpenAI sells the technique. Mira Murati's lab used Moonshot outputs one day before K3 launched.
The real threat: K3's files go public on July 27. A downloadable model sets a ceiling on what anyone can charge to rent one.
What's at stake: Anthropic's $965B valuation assumes premium prices hold for years. IBM made a similar assumption about personal computers and lost the industry it created.
Decoding why one Chinese AI model rattled Washington & Wall Street
In literature, a few stories get retold in every generation. The most familiar is good against evil, where evil grows enormous and is beaten anyway. Shakespeare used the shape, and so did Tennyson, Twain, Dumas, Tolkien, and Rowling, each giving it fresh characters and a fresh setting. Nobody credits whoever invented it, and nobody accuses the borrowers of stealing. Nobody goes hunting for the original either, largely because there is no money in finding it.
Technology has its own version of this. Some inventions become so ordinary that the company that created them drops out of the story entirely.
In 1981, IBM introduced the personal computer, effectively creating an industry. It was the most sophisticated computer company in the world, with advantages its rivals could not hope to match. Within roughly a decade, its market share, which it had built, fell from about 80% to 20%. Competitors had worked out how to make machines that were good enough at far lower cost. By 2005, the personal computer had become a commodity, and IBM sold the entire business to Lenovo for $1.75B. Owning the frontier had stopped being enough to hold it.
Silicon Valley is now circling the same uncomfortable possibility, and last week the argument arrived wearing different clothes.
An accusation, six days after a launch
On July 22, 2026, the White House science and technology director, Michael Kratsios, said the government had information that Beijing-based Moonshot AI had distilled Anthropic's most capable model while building its own. Distillation means training one AI system on another system's answers, roughly the way a student learns from a teacher's worked examples. Treasury Secretary Scott Bessent followed within hours, saying sanctions and trade blocklisting were on the table. "Open source is not open season on American IP," he wrote.
The accusation landed six days after Moonshot released Kimi K3, which the company calls the largest openly published AI model ever built. Openly published means the finished system can be downloaded and run by anyone on their own computers, rather than rented from the company that made it. When K3 launched, share prices fell across three continents, with the Nasdaq closing down 1.4% and Taiwan's main index down more than 6%.
The timing is the problem
The accusation is serious, but the timeline behind it raises as many questions as it answers.
Anthropic released the model in question on June 9, 2026, then switched it off three days later to comply with an emergency government order, and restored it on July 1. That leaves roughly 18 days during which anyone at all could reach it before Kimi K3 shipped. Researchers have questioned whether a system of K3's size could be trained on copied answers inside that window. Neither the government nor Anthropic has publicly produced evidence supporting the allegation, while Moonshot has remained silent on the matter.
Everyone learns from everyone
Even if the timing questions are eventually resolved, a second and more uncomfortable problem remains. Learning from another model's outputs has become routine throughout the industry, and American companies do it constantly. OpenAI sells the technique as a product feature. One day before Kimi K3 arrived, the former OpenAI chief technology officer, Mira Murati, released her lab's first model and disclosed that some of its training used answers generated by an earlier Moonshot system.
Anthropic's own complaint, filed publicly in February 2026, is narrower and better documented. It alleges that three Chinese labs used roughly 24k fraudulent accounts to generate more than 16M conversations with Claude, disguising the traffic as ordinary use. That is a complaint about deception rather than about the technique itself. Anthropic has also argued that copied models inherit the abilities of the original without inheriting its safety training, so dangerous capabilities spread with the brakes removed.
And while the argument is serious, it sits awkwardly beside the $1.5B settlement a court approved just two days before the accusation, covering copyrighted books Anthropic had downloaded to train Claude. The distinction between learning from a model and learning from copyrighted books may prove legally significant. To critics, however, both are arguments over who gets to learn from whom.
While the ethical and legal questions surrounding model distillation are important, they explain only part of why Kimi K3 rattled both Washington and Wall Street. The larger question is what happens to an industry when its most valuable products become abundant enough that no single company can easily control their price or distribution.
What a downloadable model does to the price
When a capable model can only be rented from its maker, that maker sets the price. When a comparable model can be downloaded and run on a customer's own machines, the rental price cannot rise much above the cost of running the free alternative. Moonshot has said Kimi K3's full files will be published on July 27, 2026.
That ceiling is important because of what American labs have promised their investors. Anthropic reported $47B in annual revenue in May 2026 and raised money at a valuation of nearly $965B. Spending on that scale assumes premium prices hold for years. A downloadable competitor makes that assumption negotiable, threatening the very foundation of its business model.
Not everyone sees that economic shift as a threat. Jensen Huang, whose company sells the chips the whole industry runs on, told Axios that Wall Street has the panic backward. Cheaper models, he argues, pull more people and businesses into using AI, which increases demand for computing power rather than reducing it. "There's no scenario where China runs U.S. companies off the road," he said. He also called for targeting the misconduct rather than the models, a distinction Washington has not yet drawn.
Does the inventor own the invention?
For several years, three assumptions have held the industry together. Frontier AI would stay extraordinarily expensive to build. The companies spending billions on training would capture most of the profits. Arriving first would create a lasting advantage.
IBM believed something close to all three about computing, and the record from 1981 to 2005 suggests the belief was fragile. The most valuable company in a technological shift is not always the one that invents the thing. Often, it is the one who works out how to make it cheap enough for everyone else to use.
Moonshot may eventually be found guilty of all the allegations against it. It may instead become another chapter in the long history of technologies becoming ordinary. Either way, the harder problem for America's AI companies goes beyond determining whether China is learning from their models. It is whether machine intelligence is turning into what personal computers became four decades ago: good enough, abundant, and impossible for any one company to own.


Brain Snack (for Builders)
![]() | If your product's margins depend on renting access to a capability someone else can now download for free, your pricing has a ceiling you don't control. Watch the open-weight release cadence in your category like a hawk, and build your moat in the workflow, data, and integrations around the model, not in the model itself. |

Outperform the competition.
Business is hard. And sometimes you don’t really have the necessary tools to be great in your job. Well, Open Source CEO is here to change that.
Tools & resources, ranging from playbooks, databases, courses, and more.
Deep dives on famous visionary leaders.
Interviews with entrepreneurs and playbook breakdowns.
Are you ready to see what’s all about?
*This is sponsored content

Quick Bits, No Fluff
Sutskever's SSI partners with NVIDIA: Ilya Sutskever's Safe Superintelligence is teaming with NVIDIA to scale its research, a rare signal of how the secretive lab plans to access serious compute.
NVIDIA's open security alliance: NVIDIA launched an open, secure AI alliance focused on cybersecurity, pushing shared defenses as autonomous AI raises the stakes for the whole industry.
Altman says AI hit the singularity: Sam Altman claims AI has entered the "singularity," a striking framing that's reigniting debate over how much of this is insight and how much is hype.

Wednesday Poll
🗳️ A downloadable Chinese model just put a ceiling on what US labs can charge. What's the real story? |

Meme Of The Day
The Toolkit
Dust: No-code platform for building custom AI agents that connect to your company's tools and data, so teams can automate workflows without engineering.
Krea: Real-time AI image and video generator with a creative-first interface, great for designers who want to actually steer the output instead of fighting prompts.
Lavender: AI sales email coach that scores your drafts in real time and suggests rewrites to lift reply rates.

Rate This Edition
What did you think of today's email? |








