By the Zambezi Institute Security Team | September 2026
Abstract
On 1 September 2026 the German federal government formally attributed to Russian state entities the attempted drone attack on Leipzig/Halle Airport of 4–5 August. The attribution, delivered jointly by the Federal Ministers of the Interior and Foreign Affairs, was accompanied by a set of graduated diplomatic countermeasures and a commitment to pursue further restrictive measures at the European level. This paper takes the episode as an entry point into a broader analytical problem: the durability of sub-threshold, or “grayzone,” competition as a mode of confrontation between Russia and the Atlantic alliance.
The argument advanced here is that this mode of confrontation is strategically selfdefeating for both protagonists, though for different reasons and on different timescales.
For Russia, the accumulation of attributed operations converts episodic friction into
structural exclusion from European legal, financial, and diplomatic space, without producing the coercive outcome sought. For NATO member states, the same dynamic imposes an open-ended defensive burden, generates domestic contestation over resource allocation, and introduces escalation risks that ambiguity makes difficult to govern.
The paper further contends that the principal costs of this equilibrium are externalised onto third parties: onto import-dependent economies, onto the insurance and logistics architecture of global trade, and onto the investment horizons of states with no stake in the underlying dispute.
It concludes by examining why the People’s Republic of China, notwithstanding its alignment with Moscow on questions of world order, possesses material incentives that point toward containment rather than expansion of the confrontation, and by sketching what a negotiated limitation of the gray zone might plausibly involve.
Keywords: hybrid warfare; gray-zone conflict; escalation management; critical
infrastructure protection; economic interdependence; NATO–Russia relations1.
Introduction: An Attribution and Significance
The facts of the Leipzig case are, by the standards of this category of incident, unusually well documented. During the night of 4–5 August 2026, a drone carrying explosives was recovered inside the secure perimeter of Leipzig/Halle Airport, in the vicinity of parked Ukrainian Antonov cargo aircraft; the detonator was removed by a disposal robot and airport operations were suspended.
A second unmanned vehicle was struck by a freighter executing a go-around during the closure. German media subsequently reported the discovery of a third device in a field near the airfield. On 1 September, Interior Minister Alexander Dobrindt stated that the combination of police investigation, offence patterning, and intelligence assessment established Russian responsibility, and that the operation was
consistent with a wider pattern of Russian activity in Europe rather than an isolated act.
Foreign Minister Johann Wadephul announced that the Russian ambassador had been summoned, that the consulate general in Bonn and the Russian House cultural centre in Berlin would be closed, and that Germany would seek additional sanctions, travel restrictions, and pressure on the so-called shadow fleet through European Union instruments.
Moscow rejected the finding and indicated that it would respond. The analytical interest of the case lies less in its particulars than in what it reveals about the structure of the confrontation. Leipzig/Halle is not an incidental target. It is one of Europe’s
principal freight nodes, the operating base of Ukraine’s Antonov Airlines following the
destruction of Hostomel in 2022, and the host of NATO’s Strategic Airlift International
Solution. An operation against it is legible simultaneously as sabotage, as signalling, and as an attempt to raise the insurance and security costs of Western logistical support to Ukraine.
It is, in other words, a compressed illustration of the logic this paper seeks to
interrogate. A caveat is necessary at the outset. Attribution in this domain is an inferential exercise conducted largely on the basis of material that governments do not publish. The German assessment is detailed and is corroborated by allied services, but it remains a governmental claim contested by the accused party. The argument developed below does not depend on the resolution of that particular dispute.
It depends on the observable fact that a sustained pattern of such incidents, and of official attributions of them, now constitutes a standing feature of the European security environment.
2. Conceptual Framing: The Uses and Abuses of “Hybrid War”
The term “hybrid warfare” entered general circulation as a description of adversaries
combining conventional, irregular, and criminal modalities within a single operational design.
Its subsequent application to Russian conduct has been considerably looser, and the looseness has consequences. Several of the scholars who contributed to the popularisation of the so-called Gerasimov Doctrine have since disavowed it, on the ground that the phraseattributes to Moscow a coherence of doctrine that the available evidence does not support.
The concept of gray-zone competition is analytically preferable: a set of gradualist
strategies pursued below the threshold at which armed response becomes obligatory,
designed to accumulate advantage without occasioning decisive counteraction.
Two properties of this mode of competition are relevant here. The first is that it is not war in the Clausewitzian sense, since it does not seek the destruction of the adversary’s capacity to resist and does not culminate in a decision. It is better understood as coercive friction: an attempt to alter an opponent’s cost calculus incrementally rather than to defeat him.
The second is that its defining feature, deniability, is also its principal defect as an instrument of statecraft. The classical treatment of coercive bargaining holds that the manipulation of risk works only where the signal is received as intended. An operation designed to be deniable is
by construction an operation whose meaning is uncertain to its recipient, which means that its coercive content is degraded at precisely the moment its escalatory potential is preserved.
This is the structural pathology of the gray zone. It is easy to enter, difficult to calibrate,
and, as the accumulated record since 2022 suggests, resistant to termination. Neither party controls the tempo, because the tempo is set by the interaction of two adaptive systems rather than by either alone.
3. The Russian Cost Ledger
3.1 Attribution as an Instrument of Structural Exclusion.
Each attributed operation generates two distinct effects. The first is the direct countermeasure, which in the German
case is modest: a summons, two closures, an undertaking to pursue restrictive measures in Brussels.
The second, and more consequential, is narrative consolidation. Attribution
converts a contested claim into an established premise of European policymaking, and each such conversion lowers the political threshold for the next round of measures.
The cumulative effect over four years has been the progressive withdrawal of Russian access to European diplomatic, financial, and cultural infrastructure. This is not a cost that can be reversed by a subsequent change of tactics, since the institutional and legal architecture of exclusion, once constructed, exhibits considerable inertia.
3.2 Diminishing Marginal Returns.
Sub-threshold operations derive their efficacy from surprise and from the defender’s unpreparedness. Both conditions erode with repetition. European states have responded with counter-unmanned-systems investment at civil aviation facilities, with the hardening of undersea and energy infrastructure, and with markedly improved intelligence sharing on precisely this category of threat.
The marginal operation is therefore more likely to be detected, more likely to be attributed, and less likely to achieve its physical objective, while the strategic objective, the erosion of European
support for Ukraine, has not been realised. Indeed the observable pattern is closer to theinverse: attributed incidents have functioned as consolidating events for alliance cohesion and as justifications for further restrictive measures.
3.3 Opportunity Cost.
The resources committed to this campaign are not merely financial. They include scarce intelligence tradecraft, agent networks, and diplomatic bandwidth. More significantly, a protracted confrontation with the European Union constrains Russia’s
capacity to conduct its declared reorientation toward Asian and Global South partners from a position of strength rather than of necessity. A state whose European relations are foreclosed negotiates in Asia with correspondingly reduced leverage.
4. The Atlantic Cost Ledger
4.1 The Open-Ended Defensive Burden. Deterrence against sub-threshold action is
structurally more expensive than the action it deters. The attacker chooses among an
effectively unbounded set of targets; the defender must protect a substantial fraction of them.
European states must now fund conventional deterrence on the eastern flank and domestic resilience simultaneously: air defence at civil airports, cyber protection for hospitals and municipal utilities, hardening of cable and pipeline infrastructure, and institutional capacity against information operations. These are real expenditures with genuine opportunity costs against health, decarbonisation, and industrial competitiveness agendas, and they are incurred in a fiscal environment in which such trade-offs are politically contested. The domestic political economy of this burden deserves closer attention than it has received.
4.2 Escalation Through Misinterpretation.
The Leipzig episode furnishes a concrete
illustration of the escalation problem. An explosive device inside the perimeter of an airport that handles both commercial freight and NATO strategic airlift is separated from mass casualties by contingency rather than by design.
Had the second drone caused the loss of a
freighter on approach, the incident would have generated pressure for consultation under Article 4 and potentially for a response calibrated to a fatality count rather than to an intention. The literature on inadvertent escalation is consistent on this point: the risk in such interactions arises not from either party’s decision to escalate but from the interaction of ambiguity, organisational routine, and domestic political pressure following an unintended
outcome.
4.3 The Normative Cost.
The Atlantic alliance’s claim to legitimacy rests substantially on its identification with rule-governed conduct. That claim is placed under strain by a prolonged engagement in a domain where rules are unsettled, even where the alliance’s own posture remains defensive.
The relevant risk is less that European states will themselves adopt sabotage as routine statecraft than that the normalisation of such conduct globally, by any party, lowers the threshold for its adoption by others, including actors with less capacity for restraint. Normative erosion is a collective-action problem, and defensiveparticipation does not exempt a participant from its consequences.
5. Externalities:
The Distribution of Costs Beyond the Protagonists
The most significant analytical claim of this paper is distributive. The costs of protracted
gray-zone competition are not borne principally by the parties who generate them.
5.1 The Risk Premium on Logistics.
Attacks and attempted attacks on freight
infrastructure operate on the global trading system through the pricing of risk rather than through physical destruction. Marine and aviation underwriters revise war-risk premia; carriers reroute; shippers hold larger buffer inventories. Each adjustment is individually marginal and collectively substantial, and none of it is recoverable.
Applied across airports, ports, pipelines, and submarine cable routes, the aggregate effect approximates a tax on trade levied by no authority and collected by no treasury.
5.2 Commodity Volatility and Fiscal Transmission.
Energy and agricultural markets price geopolitical risk in anticipation of disruption rather than in response to it. An attribution of the kind delivered on 1 September moves forward curves without a barrel or a tonne being lost. For states that are net importers of both energy and cereals, and that borrow in foreign
currency, this transmits through the exchange rate to the import bill and thence to the fiscal position.
The incidence of European security friction is therefore felt in the debt service ratios of states in Africa, South Asia, and Latin America that have no representation in the
dispute and no instrument with which to hedge it.
5.3 The Investment Horizon.
Capital committed to long-lived assets requires a legible political horizon. Protracted low-intensity confrontation does not destroy that horizon so much as blur it, which is sufficient to defer decisions on infrastructure, technology transfer,
and cross-border industrial capacity. Deferral is not neutral; foregone investment
compounds.
The concept of weaponised interdependence supplies the appropriate frame. Networks
constructed for efficiency, whether financial, logistical, or informational, become sites of coercive leverage precisely because so many parties depend upon them.
The corollary is that contests conducted through those networks impose costs on all participants in the network, in rough proportion to their dependence and inverse proportion to their power.
6. The Chinese Position: Structural Interest Rather Than Preference
China occupies an anomalous position: substantially exposed to the consequences of the confrontation, minimally implicated in its conduct. Three considerations suggest that its material interests favour containment.
The first is dependence. An export-oriented economy that imports the majority of its energy and a significant share of its feed grain requires functioning sea lanes, solvent Europeancustomers, and predictable Russian supply. A Russia–NATO spiral threatens all three simultaneously.
The Red Sea disruptions and the Ukrainian war have already demonstrated the speed with which route risk is repriced. The second concerns the architecture of world order. Beijing’s declared objective is
multipolarity. A protracted and intensifying Russia–NATO confrontation exerts pressure
toward bipolar consolidation, in which China is assigned to a bloc rather than positioned between blocs.
That outcome would reduce its diplomatic latitude with European capitals and with the Global South, both of which currently constitute sources of leverage. The role
of indispensable interlocutor is more valuable, and considerably cheaper, than the role of co-belligerent.
The third is domestic. Growth stabilisation, technological self-sufficiency, and demographic adjustment are demanding programmes requiring a permissive external environment. A European conflict that propagates into secondary sanctions and financial restriction forces a choice between economic and geopolitical commitments that Beijing has consistently
sought to defer.
This analysis is not an attribution of benevolence, and it should not be read as predicting Chinese mediation. China’s material and diplomatic support for Russia’s position has been substantial, and its stated commitment to dialogue coexists with conduct that has materially assisted Russian resilience under sanction.
The claim advanced here is narrower and,
precisely for that reason, more robust: China’s incentives with respect to escalation run in the opposite direction to its alignment on order, and this divergence is the most plausible available basis for third-party interest in limitation.
7. Counterarguments and Limitations
Intellectual honesty requires acknowledgement of the strongest objections to the foregoing. The first is that the “unsustainability” claimed here has now persisted for over four years, which is a considerable duration for an unsustainable equilibrium. Sub-threshold competition may be better characterised as a stable and tolerable condition, unpleasant and
expensive but indefinitely maintainable, in which case the argument confuses cost with
limit.
The response is that stability of form is compatible with accumulating stock costs, and that the escalation risk is probabilistic rather than trend-based: a low per-incident
probability of a casualty-producing failure integrates upward over a sufficient number of incidents.
The second objection is that the symmetry implied by the phrase “both parties” is
misleading. The documented pattern is one of Russian action and European response; the two ledgers are not morally or legally equivalent, and analysis that treats them as
structurally similar risks obscuring a question of responsibility.
This objection has force, andthe argument here should be read as concerning the structure of the interaction rather than
the distribution of culpability within it.
The third is that negotiated limitation presupposes a verification capacity that does not exist. Deniable operations are, by design, resistant to the confidence-building instruments developed for conventional and nuclear arms control. This is the most serious of the three objections, and Section 8 should be read as provisional in light of it.
8. Toward Limitation
If victory in the gray zone is unavailable, the relevant policy object is the constriction of the zone itself. Three lines of development are worth pursuing, in ascending order of difficulty. The first is the consolidation of a categorical prohibition on operations against civil infrastructure whose failure produces indiscriminate civilian harm, developed initially through declaratory commitment among willing states and articulated in terms of existing international humanitarian and civil aviation law rather than as novel obligation.
Airports, hospitals, water systems, and civil nuclear installations are the appropriate initial scope. The second is the construction of technical attribution capacity with a measure of independence from the states making the accusations. Multilateral or plurilateral fora capable of assessing forensic evidence would raise the reputational cost of denial and
reduce the space in which contested attribution serves as a shield.
The third, and least tractable, is the establishment of dedicated de-escalation channels for incidents involving civil infrastructure, analogous in function to the incidents-at-sea arrangements of the Cold War. Such mechanisms do not require agreement on responsibility to be useful.
They require only a shared interest in preventing a technical failure from becoming a political crisis, and that interest is present. None of this is proximate. Each element presupposes a degree of political will that current conditions do not supply. The purpose of specifying them is to establish what the alternative to indefinite friction would have to consist of.
9. Conclusion
Sub-threshold competition presents itself as the prudent alternative to major war. The
characterisation is not so much false as incomplete. It is prudent with respect to the
immediate risk of general conflict and imprudent with respect to almost everything else: it generates costs without producing settlements, it hardens the positions of both parties while narrowing the diplomatic space in which those positions might be revised, and it
distributes its principal burdens onto states that are neither parties to the dispute nor
beneficiaries of its outcome.
Incidents of the Leipzig type will continue, and their individual significance should not be overstated. They will not determine the outcome of the war in Ukraine. What they will determine, through the accumulation of risk premia, deferred investment, and eroded normative constraint, is the price at which the coming decade of international economic integration is transacted, and the identity of those who pay it.
Prepared by the Security Team of the Zambezi Institute. The views expressed do notnecessarily reflect the position of the Institute or its partners.
THE ZAMBEZI INSTITUTE Research for Policy. Policy for People.
