PLA-Linked University Bought Nvidia H200 Chips Through Blacklist Loophole
Northwestern Polytechnical University, a Chinese defense school on the US blacklist since 2001, purchased two Nvidia H200 chips in October 2026 through a domestic intermediary. No export license required. Reuters reviewed 26 procurement records showing the pattern runs wide.
A procurement record published by a US-blacklisted Chinese defense school exposes the gap between what the Entity List says and what it can actually enforce.
Key takeaways
- Northwestern Polytechnical University, a PLA-linked school on the US blacklist since 2001, purchased two Nvidia H200 AI chips for approximately $123,000 in October 2026 through a domestic Chinese reseller, with no Nvidia involvement and no US export license required.
- Reuters reviewed 26 Chinese procurement and corporate records showing the same pattern across multiple defense-linked universities, including purchases and rented access to H100, A100, and A800 chips, all restricted from export to China.
- The workaround is structurally simple: a blacklisted institution buys from a domestic supplier that is not on the Entity List. Washington has no jurisdictional hook to stop that transaction.
Northwestern Polytechnical University (NWPU), Xi'an, one of China's "Seven Sons of National Defense" and a school the Commerce Department has restricted since 2001 over missile-proliferation research, purchased two Nvidia H200 AI chips on October 21, 2026. The supplier was Shaanxi Bosuan Network Technology, a domestic Chinese intermediary, per Reuters' reporting. The price was ¥874,700 yuan, reported by Reuters as approximately $123,000. First reported by Reuters (byline: Eduardo Baptista, November 11, 2026), the purchase came from a procurement record NWPU published on its own website.
The H200 is Nvidia's most capable chip class for training and running advanced AI. Exporting it to NWPU requires a Commerce Department license that carries a policy of denial. That policy is irrelevant when the transaction happens inside China between two Chinese entities.
The Purchase Is One Data Point in a Much Wider Pattern
Reuters reviewed 26 procurement and corporate records. The findings go well beyond NWPU.
Shenzhen University bought three H100 processors for ¥769,800 in September. Wuhan University of Technology bought an H100 server for ¥355,000 and four A100 chips for ¥344,000 in June. Beihang University, another "Seven Sons" school, bought four A800 processors for ¥489,000 in April. The University of Chinese Academy of Sciences secured cloud-compute contracts giving access to H800 and A800 chips, with one contract priced at 10 yuan per chip-hour.
NWPU itself held five contracts for rented computing capacity, including two seven-month contracts from January 2026 (valued at ¥441,700 and ¥441,000) for server access containing eight H200 chips each. The school was not just buying hardware. It was building sustained, contracted access to the full stack of chips Washington said it couldn't have.
The Trump administration opened a case-by-case H200 licensing pathway for Chinese buyers in January 2026. That change explicitly excluded Entity List organizations. NWPU's blacklist status was not affected. Neither was the enforcement gap.
NWPU, Nvidia, and the Commerce Department's Bureau of Industry and Security did not respond to Reuters' requests for comment.
What the Entity List Can and Cannot Do
The Entity List restricts US persons and companies from exporting controlled technology to named organizations without a license. What it cannot do is reach a purely domestic Chinese transaction. When a chip moves from a grey-market or third-country inventory into a Chinese reseller's warehouse, and then from that reseller to a blacklisted buyer, the US has no jurisdictional hook at the point of sale.
NWPU's history makes the gap more striking. The school was added to the Entity List in 2001 for alleged missile-proliferation activities. Restrictions have been tightened over subsequent years. A prior federal prosecution established that NWPU has previously received illegally exported US goods.
Despite two decades of escalating restrictions, the school published its own H200 procurement record on its own website last month.
The enforcement architecture has failed, not the intelligence. The controls assume a chokepoint at the moment of export. Once chips are in China, that chokepoint disappears. Prior TFTC coverage has documented this structural problem in adjacent cases involving ghost companies cleared to handle restricted chips, western chips flowing into weapons despite sanctions, and structures that skirted the same licensing regime.
The thesis the NWPU case tests: US export controls on advanced AI chips are functionally theater once chips clear the border. Disproving it would require a systematic, verifiable enforcement mechanism that intercepts chips flowing through domestic Chinese resellers before they reach blacklisted institutions, with seizures and prosecutions to show for it. That mechanism does not currently exist.
There is a wider credibility problem layered on top of the enforcement gap. Three Republican House committee chairmen, Brian Mast (Foreign Affairs), John Moolenaar (Select Committee on China), and Rick Crawford (Intelligence), sent a letter to Jensen Huang requesting a joint, closed-door briefing on November 18, 2026, over Huang's interactions with Alice Huang, a Megaspeed executive described in the letter as a publicly reported PRC intelligence asset. Huang has admitted to an affair with Alice Huang, a former executive of Singapore-based Megaspeed. The political will to enforce controls is questionable when the lobbying channel for loose chip rules may itself be compromised.
What Comes Next
BIS has not publicly acknowledged the NWPU purchase. Congress has the Reuters dataset in front of it now.
Whether that produces actual enforcement actions against domestic Chinese resellers, secondary sanctions on intermediary networks, or another round of letters and hearings with no operational follow-through is the question. The procurement records will keep coming either way. NWPU published this one itself.
Sources
- Reuters exclusive, Eduardo Baptista, November 11, 2026 (first reported by Reuters)
- BIS Entity List
- DOJ press release: Chinese national sentenced for illegal exports to NWPU
- House Foreign Affairs Committee press release: Chairmen Mast, Moolenaar, and Crawford request Jensen Huang brief Congress, November 5, 2026
Frequently Asked Questions
How did a blacklisted Chinese university buy Nvidia H200s without a US export license?
NWPU purchased from Shaanxi Bosuan Network Technology, a domestic Chinese supplier not on the Entity List, per Reuters' reporting. The transaction was China-to-China at the point of sale, requiring no US export license. The upstream path that got restricted chips into the domestic Chinese supply chain, through grey-market sourcing or third-country intermediaries, is where the control breaks down, and that upstream path is outside US enforcement reach.
Did the Trump administration's January 2026 decision to allow some H200 exports to China change anything for NWPU?
No. The case-by-case H200 licensing pathway opened in January 2026 applied to eligible Chinese buyers. It explicitly did not lift restrictions on Entity List organizations. NWPU's blacklist status carries a policy of denial for controlled US technology. The policy did not change; the enforcement did not reach this transaction.
What does this say about the broader credibility of US sanctions tools?
If the US cannot enforce its own Entity List against a school it has watched since 2001, using procurement records the school published itself, it signals that any centralized control system faces the same structural limit when a determined state actor is motivated to route around it. The same gap that lets chips flow through domestic intermediaries is the gap that makes dollar-denominated coercive tools, SWIFT exclusions, frozen reserves, secondary sanctions, increasingly hollow against adversaries with the patience and infrastructure to build around them.
