Ukraine's Cyber Forces bill: who commands the hackers?
Ukraine encouraged volunteer hackers to join its fight against Russia. Four years on, parliament is weighing a military Cyber Force…
Megaspeed, a Singapore cloud company with an untraceable owner, imported $4.6 billion of Nvidia hardware while US export rules treated a share register as proof of who was buying. The departure of Nvidia's chief executive has had the attention. The harder problem is that America's chip controls rely on the seller to vouch for its own customers, and on a regulator that depends on the seller for its facts.
Enable JavaScript and use a browser with spoken audio support to listen.
Read aloud by your browser. Voice and availability depend on your device.
Megaspeed International, a Singapore cloud company, imported $4.6 billion of Nvidia hardware between 2022 and 2025, according to the research group C4ADS. Its registered owner lists an office that, the Straits Times found, is occupied by an interior design firm whose co-founder says he does not know the company.
On 12 November Nvidia announced that Jensen Huang had resigned as chief executive. Six days earlier the New York Times had reported, citing people briefed on the intelligence, that a memo circulated among US policymakers identified Alice Huang, a Megaspeed executive with a close relationship to him, as an asset of China’s Ministry of State Security. A spokesman for the Chinese embassy called the reporting “nothing but smears against China”, and an Nvidia spokesman told the paper that the chief executive’s dealings with her were like those with any customer. Nvidia’s board, which has opened an independent investigation, says it has no reason to believe that company or national secrets were compromised.
The institutional question will outlast the personal one. The most tightly controlled product in the world economy was sold in that volume to a buyer whose ownership nobody in authority appears to have established.
Megaspeed was previously 7Road International, the Singapore arm of a Chinese games company, and was renamed in March 2023. That month, according to a C4ADS report published in September, control passed to Alice Huang, whose Chinese name is Huang Le. On 10 November 2023 a single share moved from her to a new Singapore company, Swiftdata, and a Singaporean named Tan Yong Pong was installed as director on the same day. The remaining 9,999,999 shares followed on 1 December.
C4ADS calls that same-day swap “a red flag for nominal rather than genuine change of beneficial ownership”. It could not determine who controls Swiftdata. It assessed that Alice Huang may have kept practical control into late 2025, noting that she went on being presented at conferences as Megaspeed’s chairwoman. The report is careful to say that this is evidence of risk and does not establish a violation.
Tan is the sole director of both companies, and when the Straits Times visited his registered home address in October 2025 a relative said he no longer lived there and was believed to be in China. Singapore police have been investigating Megaspeed since that month for “suspected breaches of our domestic laws”.
American rules do not forbid the business Megaspeed is in. It builds data centres in South-East Asia and rents their computing power to Alibaba, the New York Times reports. Serving Chinese customers remotely in that way is not necessarily illegal, the paper found in October 2025, but the chip purchases would have been unlawful had Megaspeed still been a Chinese subsidiary. Washington sharpened that logic in July, when Commerce guidance tied chip licensing to corporate parentage wherever a buyer happens to sit.
That design makes ownership the whole test, and it leaves the seller to apply it. Nvidia told the Times in October 2025 that its compliance team had found Megaspeed to be wholly owned and operated by a company based outside China, with no Chinese shareholders, and that its site visits had found no evidence of diversion. As a description of Swiftdata’s filing, that is accurate. A share register says whose name is on the shares. It is silent on who chose the director, who pays for the hardware and who gives the instructions, and those were the questions the transfer of November 2023 raised.
Get McCyber by email
Get new McCyber essays and snapshots on technology and state power by email as they are published.
The physical checks fared little better. When a Commerce Department official visited Megaspeed’s Malaysian data centre in September 2024, the Nvidia technology on site was still in boxes, three people familiar with the inspection told the New York Times. Bloomberg, analysing trade records, reported that the tallies Nvidia gave the US government undercounted the chips sold to Megaspeed through hardware partners by 50,000 units. Nvidia later said it had checked further warehouses holding the missing hardware, and declined to say how many chips it found.
Nvidia also confirmed to the Times that Megaspeed had placed no new orders for months. Malaysian trade records examined by Bloomberg nonetheless show Megaspeed importing at least 17,544 of Nvidia’s GB300 processors, worth about $787 million, in November 2025. One possible explanation is that the hardware arrived through server makers and not from Nvidia directly: the Times found that most of Megaspeed’s earlier purchases came through the American subsidiary of Inspur, a Chinese company on the US entity list. If so, a supplier’s own order book reveals little once its products move through intermediaries.
Nvidia’s public accounts are no better guide. Its filing for the quarter to July 2025 put 22% of revenue in Singapore, counted by where customers were billed, while noting that the products were almost always shipped elsewhere. From the next quarter it counted by customers’ headquarters instead, and the Singapore line vanished. Both filings carry the same caveat, that the end customer and the shipping location may be somewhere else. The Wall Street Journal has argued that investors are owed an explanation.
The body meant to check the seller is the Commerce Department’s Bureau of Industry and Security. Bloomberg reports, citing people familiar with the matter, that Nvidia’s general counsel called the under secretary who oversees export controls in late summer 2025 to ask about the Megaspeed inquiry. In the weeks that followed, staff were told to route requests concerning Nvidia through that official and not to mention Megaspeed externally. In late 2025 the Justice Department asked the bureau to pause, and Bloomberg’s sources say it has made no progress since. Nvidia says it consults officials to answer their questions and pass on what it has learned. A Commerce spokesperson said the bureau “conducts all enforcement strictly by the book”.
The structure is plain either way. The agency depends on the exporter for inventory data, site visits and knowledge of the customer, and the exporter has every commercial reason to find its customers in order.
There is a serious argument that export controls did not fail here at all. No authority has publicly established that a single chip was diverted to China. Megaspeed categorically denies diversion and says Singapore’s inquiry into that allegation ended this year with no adverse action against it. The business model was lawful. Nvidia visited 12 facilities in three countries and, by its account, found the hardware. On this reading the rules were followed, and what ended a chief executive’s tenure was personal conduct and the appearance of a conflict.
If so, it would also mean that a regime can be followed to the letter while nobody in Washington or Santa Clara is able to say who controls a $4.6 billion buyer.
Remedies have been proposed. C4ADS wants verification that continues after a sale and traces ownership as it changes. A policy memo from IAPS, an AI policy think tank, urges location verification on exported chips and stronger customer checks by cloud providers. None settles who is responsible for knowing the customer: the company that books the revenue, or a public body with the staff and the standing to look past a share register. Until that is decided, the paperwork that satisfied the last check will satisfy the next one.
Sources: C4ADS, “Covert Compute” (September 2026); Nvidia Form 8-K, 12 November 2026, board statement, 8 November 2026, and Forms 10-Q for the quarters to 27 July and 26 October 2025; The New York Times, 9 October 2025 and 6 November 2026; The Straits Times, 11 November 2026; The Wall Street Journal, 11 November 2026 (opening paragraphs only); Bloomberg, 9 November 2026; IAPS, “How to Secure Advanced U.S. Chips” (2 November 2026).
Get McCyber by email
Get new McCyber essays and snapshots on technology and state power by email as they are published.