A worker at Germany's Leipzig/Halle Airport found a drone carrying a bomb in a restricted cargo area, near planes used by Ukraine. Authorities defused the device before it could go off. Investigators called the situation a "new level of danger". Shortly after, a separate object hit a cargo plane in mid-air at the same airport.

Initial evidence suggests the drone came from Russia, according to The Guardian. The explosive was Semtex, a type of plastic explosive. It contains a compound called RDX, the same substance found in food cans hidden in a cemetery in Lithuania during a separate investigation. That match connects the Leipzig device to a wider pattern of sabotage incidents across Europe.

A suspect named Vladyslav D. told investigators he was paid more than $2,000 (£1,487) in cryptocurrency for his role in the plot. The payment fits a pattern that Western intelligence has been following for months: Russia recruiting local people to fly drones inside European countries, as reported by the BBC in late 2025. The approach uses cheap, store-bought drones and local recruits instead of Russian agents carrying out attacks directly.

Professor Jackie Akhavan, an explosives expert at Cranfield University, said the drone bomb might have dented a plane with the force of its blast but could only punch through the aircraft's body if the device sent fragments flying outward. The difference matters. A blast alone would cause limited damage, but flying fragments could tear through a plane's outer skin or damage key control parts. The device was found near Ukrainian cargo planes, which suggests the goal may have been to disrupt military supplies rather than harm civilian passengers.

Germany is one of the biggest suppliers of military aid to Ukraine. Leipzig/Halle Airport is a major cargo hub, and Ukrainian cargo planes there are part of the pipeline carrying military and humanitarian supplies to Ukraine.

Andrei Soldatov, a specialist on Russian intelligence, said it "makes sense" to suspect Moscow. He pointed to a pattern of sabotage, including arson at facilities supporting Ukraine and drones spotted over sensitive sites in Europe. Soldatov said Russia's likely motive comes from pressure created by Ukraine's own large-scale drone attacks and what he called repeated humiliation of Russian President Vladimir Putin.

The broader context here is how the situation is escalating. The drone was armed, placed near military cargo planes, and found only because a worker happened to spot it. Then a separate object hit a cargo plane in mid-air at the same airport. It is not yet clear whether that collision was connected to the drone, but together the events show how vulnerable busy cargo airports are to cheap aerial threats.

The Semtex link to Lithuania expands the investigation. The same explosive compound turning up in two countries suggests a shared supply chain, possibly running through the same networks of recruits. If that connection is confirmed, it would point to coordinated logistics across at least two NATO member countries rather than isolated incidents.

Western intelligence had already concluded that Moscow uses locally recruited people for short-range drone operations in Europe. The cryptocurrency payment to Vladyslav D. fits that model exactly: a small amount of money, a local person, and a weapon guided from afar. The low cost raises real concerns about how easily this could be repeated. If one person can be recruited for about $2,000, the price of targeting multiple European airports is tiny compared to the damage that could result.

The facts are still developing. The suspect's statement, the explosive analysis, and intelligence assessments all point in the same direction, but important questions remain unanswered. Investigators do not yet know the full supply chain for the Semtex, who directed Vladyslav D., or whether the mid-air collision involved a second drone. What the evidence does confirm is that an armed drone reached a secure area of a major European cargo airport, was placed near Ukrainian military supply planes, and was built with an explosive linked to another NATO country's sabotage investigation.