Israeli security firm Lava says it has identified 32 Nvidia Blackwell Ultra B300 accelerators — among Nvidia's most powerful data-center chips, and barred from sale to China under U.S. export controls — on monitoring systems linked to state-owned China Telecom, The Information reported on Thursday. Nobody raided a warehouse to find them: the chips surfaced through publicly reachable instances of Nvidia's DCGM Exporter monitoring tool, left on the internet without authentication.

The China Telecom systems were part of a much wider exposure. Lava's scanning found roughly 2,100 exposed DCGM Exporter hosts worldwide reporting more than 12,000 unique GPUs across nearly 300 organizations — H100s, H200s, B300s and consumer cards — with the exposed hardware valued at more than $100 million. Lava also disclosed a high-severity flaw in the same tooling, CVE-2026-47483, that could let an unauthenticated attacker crash GPU monitoring remotely.

The finding needs its caveat stated plainly: an IP address associated with a carrier is a network association, not proof of where hardware physically sits or who owns it — traffic can be proxied or tunneled — and Lava itself says the discovery raises questions about the chips' location and supply routes without proving an export-control violation. Even so, it is the first physical-evidence-style sighting in a diversion debate that has mostly run on paperwork, arriving alongside a separate October disclosure that a Chinese state-linked lessor financed more than 3 billion yuan of servers, including B300 systems, since August 2025.