Autor vibration

Russia is the biggest winner, Beijing is the broker. Europe has a small political window opened by Hungary’s election and has yet to build the architecture to use it.

Institute for Central Europe — Mini-Brief | 12 May 2026

On 4 March, the first ICE brief on the Iran conflict identified five risks to European energy security. On 30 March, the one-month follow-up confirmed that all five had materialised. Two months on, the question has changed: the crisis is no longer the chokepoint. It is what the ledger of two months looks like: who profited, who brokered, what got built, and what did not.

The Two-Month Snapshot

TTF gas settled at €44.1/MWh on 9 May, off the March peak above €69 (Trading Economics). Brent oil swung in a wide range during May: briefly under $100 on 7 May after a US one-page memorandum was transmitted to Tehran via Pakistan (Rigzone), then back above $107 by 11 May after Trump rejected Iran’s counter-proposal demanding sovereignty over the strait and war-damages compensation (Fortune). On the surface, this looks like normalisation.

Unfortunately, it is not. Maritime traffic through the Strait of Hormuz remains at roughly five percent of pre-war levels. Around 1,600 vessels remain idle in the Persian Gulf, with about 23,000 seafarers stranded (CNN). Iran’s selective-access tolling regime, transiting ships from China, Iraq, Pakistan, and Malaysia by diplomatic arrangement and excluding Western-linked vessels, has hardened into stated policy.

On 11 May, Saudi Aramco CEO Amin Nasser warned that even if reopening came today, market rebalancing would take months; if delayed by a few more weeks, normalisation would last into 2027, with the world having already lost more than a billion barrels of oil in ten weeks of conflict (CNN).

The US imposed a counter-blockade on Iranian ports on 13 April and has now turned around 58 commercial vessels at the strait. President Trump launched Operation Project Freedom on 4 May to escort merchant ships through the strait, then paused it 48 hours later for diplomatic talks (NPR). On 7 May, three US guided-missile destroyers transited Hormuz under Iranian missile fire; on 8 May, US forces struck Iranian military facilities in response. Both sides confirm the ceasefire remains nominally in effect (CBS).

The UK Royal Navy is prepositioning HMS Dragon to the region ahead of a potential multinational escort mission jointly led by the UK and France, pending political authorisation. Whether the US-side dynamics reflect a tactical handoff to the Beijing mediation track or an administration without further escalatory cards, the structural fact is the same.

The decisive mediation channel now runs through Washington and Beijing, not Brussels, with Trump scheduled to meet Xi on 14–15 May (Brookings). Iran’s Foreign Minister Abbas Araghchi was in Beijing on 6 May, days before the summit (NBC News). Beijing’s leverage is structural. China is simultaneously Iran’s largest energy customer and the principal beneficiary of Tehran’s selective-access regime. Among the major powers, Beijing retains coercive leverage and diplomatic access to all sides of the conflict. Europe is economically exposed and strategically absent.

EU gas storage stands at approximately 34% per AGSI+, around 21 percentage points below the five-year average for this point in the injection season. Two material political shifts redrew the European map during the same period. On 12 April, Viktor Orbán lost the Hungarian parliamentary election to Péter Magyar’s Tisza Party in a two-thirds supermajority (Washington Post).

Magyar was sworn in as Prime Minister on 9 May with 140 votes in favour, 54 against, one abstention; the EU flag was reinstalled on the Hungarian parliament after twelve years of absence (Euronews). His victory substantially weakens the Hungarian-Slovak veto axis that has constrained EU energy coordination since 2022. On 23 April, the southern Druzhba pipeline resumed crude flows after a three-month standoff, and the European Council formally signed off the €90 billion Ukraine loan within hours (Euronews, Pipeline Technology Journal).

Russia’s Windfall

Two months of crisis transferred wealth to Moscow at a scale not seen since the 2022 invasion. Russian seaborne oil revenue reached its highest weekly level since the start of the full-scale war, $2.42 billion in the four weeks ending 3 May per Bloomberg’s tanker-tracking data (UNITED24). Russian Urals crude is trading near $96 a barrel, more than twice the pre-war price (CNN).

The US temporarily eased sanctions on seaborne Russian oil during the conflict (Carnegie). Pre-war, the Carnegie Russia Eurasia Center assessed that Russia was heading toward “a genuine budget crisis.” Two months later, that crisis has been deferred. Chatham House described the Iran war as “an economic gift for Putin” (Chatham House). The gift is being received in real time.

Every day Hormuz remains at five percent of pre-war traffic, every day TTF settles above €40 and Brent above $90, transfers wealth to Moscow’s treasury. And from there to the war Europe is otherwise financing the defence against. For Europe, this is the central strategic contradiction of the crisis. The energy shock did not merely raise European costs. It directly funded the continuation of an aggression Europe is committed to opposing.

The Response Loop, and Who Built Architecture Instead

A response cycle that produces activity without architecture has a recognisable shape. Diagnosis, rhetoric, partial procurement, attention migration, repeat. The 2026 European cycle has now reached attention migration.

The IEA’s coordinated 400-million-barrel reserve release on 11 March covered roughly twenty days of normal Hormuz flows (CNBC). The ECB held rates and revised its 2026 inflation forecast to 2.6%. France and the UK convened two conferences on Hormuz access and assembled a 36-country statement on safe passage.

What is missing from this list is anything structural: no new joint procurement instrument, no automatic storage trigger, no pre-priced interconnector volumes. The European response architecture in place on 28 February remains in place on 12 May.

The deeper vulnerability exposed by the crisis is the mismatch between coercion timelines, measured in days, and European institutional activation timelines, measured in weeks or months. Adversaries do not need to defeat European markets outright; they only need to outpace European coordination. Compressing that gap is what architecture is for.

This is striking next to what other powers built during the same window. Russia consolidated a budget reprieve. China positioned itself as the indispensable broker, with Iran’s foreign ministry visit cementing the trajectory toward the Trump-Xi summit.

The United States went furthest. On 27 April, Wood Mackenzie’s Ed Crooks reported that the Trump administration had signed a series of executive memorandums under the Defense Production Act of 1950, directing emergency mobilisation of US oil, gas, coal, and grid capacity, with the Department of Energy’s Office of Energy Dominance Financing authorised to back loans up to $250 billion through September 2028 (Wood Mackenzie).

Whether these instruments produce durable capacity or remain primarily signalling depends on financing and permitting execution. Venezuela, with sanctions eased after the post-Maduro transition, has lifted oil production from 900,000 to 1.1 million barrels per day. Chevron, Repsol, Eni, Shell, BP, and Maurel & Prom have entered or expanded operations under new general licenses.

Mexico’s President Sheinbaum has named unconventional gas development a strategic priority. The Western Hemisphere is rallying around regional energy security as a strategic project. Not all of these shifts originated in the Hormuz crisis. Trump’s energy-emergency declaration predates it; the Venezuelan reopening followed the January post-Maduro transition. The conflict accelerated and consolidated trajectories already underway.

The 2022 contrast still holds, and is now mirrored across the Atlantic. By 24 April 2022, sixty days into the post-invasion shock, the European Commission had announced REPowerEU, launched the EU Energy Platform, drafted the storage targets regulation, adopted five sanctions packages, and brokered LNG diversification agreements with Qatar, the United States, Norway, and Algeria.

Most were imperfect, each was architectural. The US in 2026 is building durable instruments under the DPA. Europe in 2026 is not. The Henry Hub gas price is around $2.50 per million BTU. The TTF price is around $15. European industry is paying six times more for gas than US industry, and the gap has widened during the conflict.

Druzhba Reopened, Hungarian Window Opened

The Druzhba reopening was ad hoc trilateral bargaining, conducted at the cost of depleted strategic stocks, blocked sanctions packages, blocked Ukraine financing, and a Slovak high-treason investigation against the Prime Minister. The pipeline is open. Slovakia’s strategic reserves remain below the IEA-mandated 90-day minimum. The Slovak police investigation into Robert Fico continues.

On 9 May, Fico travelled to Moscow as the only EU leader present for Russia’s Victory Day commemorations, after several Baltic states denied his aircraft passage through their airspace (Manila Times / AFP). He met Putin in the Kremlin on the same day Péter Magyar was sworn in as Prime Minister of Hungary in Budapest.

The political claim accompanying the reopening, that Slovakia is now restored to access to cheap Russian oil, does not survive contact with the data. Slovak retail diesel averaged €1.78 per litre in early May, roughly seven cents above the Czech Republic and sixteen cents above Poland; only Austria, among Slovakia’s neighbours, has higher prices (STVR).

Russian Urals crude itself reached $116.05 per barrel in early April, its highest level since 2013, with the discount to Brent narrowing from around $28 per barrel in February to roughly $15–17 by April per Reuters tracking of Primorsk-loading cargoes (bne IntelliNews, Reuters via Baird Maritime).

Russian oil delivered through Druzhba is not cheap. The Druzhba dispute served Fico’s government as a grievance instrument inside EU politics. The political utility of the dispute exceeded the economic advantage of the oil itself.

The architectural lesson is intact. The Adria pipeline transit-fee dispute, with JANAF fees three to five times higher than Druzhba’s and MOL’s complaint to DG Competition still pending, is the case in miniature. Physical capacity exists; pre-governed access conditions do not. A pipeline that exists but becomes politically or commercially punitive during crisis is not a full security asset. Diversification is not merely physical redundancy; it is governance redundancy. The asset is pre-negotiated access conditions that remain politically and commercially viable during crisis.

Magyar’s victory removes the Hungarian-Slovak veto coalition that has blocked EU-wide structural moves on Russian energy since 2022. Slovakia under Fico is now politically isolated within the bloc. The window for joint procurement upgrades, automatic storage triggers, and pre-priced crisis instruments is genuinely open, for the first time since 2022 that the institutional politics may permit them. The window will not stay open indefinitely.

Architecture, Not Activity

The architectural alternative starts from a single principle. Remove political-cycle dependency from the response itself. Three priorities follow.

First, an Automatic AggregateEU Crisis Window. Defined market conditions, such as TTF settlement above a threshold or storage levels below a threshold, would trigger AggregateEU at scale automatically, with strategic-reserve drawdown rights for member states below the 90-day minimum activated in parallel.

Second, pre-contracted crisis-corridor capacity. LNG suppliers and interconnector operators would sign forward instruments locking in crisis-response volumes at predetermined prices, removing the negotiation lag that consumes the first three to four weeks of any shock. The Adria fee dispute would have been resolved in advance.

Third, emergency permitting with sunset clauses. Permit acceleration and emergency procurement procedures activate automatically at threshold conditions and expire automatically when conditions normalise. Activation and deactivation become procedural rather than political.

The Hungarian transition makes the Brussels-wide path viable for the first time since 2022. The legal authority for pre-authorised triggers already exists, under Article 122 TFEU for emergency energy measures and Article 20 TEU for enhanced cooperation among willing member states. Triggers need not be supranational fiat; they can be pre-agreed opt-in protocols with national override safeguards.

Where the Brussels-wide path does not suffice, regional and commercial routes remain available: a Visegrad+ storage-trigger pact, commercial frameworks signed by national TSOs and refiners directly with suppliers. Institutional capacity should be built at the widest level politically available. The political window will not stay open indefinitely.

The Cleanup Question

There is a strong case for European diplomatic engagement in stabilising the Gulf. Europe is the largest external victim of the spillover and is paying the highest political cost in Russia’s war financing. Engagement, however, has to come with a clear principle attached.

The strikes of 28 February were a strategic decision taken in Washington and Jerusalem. Europe was not consulted. Stabilisation does not require retrospective alignment with the original decision.

The 36-country safe-passage statement assembled by France and the UK is the right register: diplomatic, multilateral, condition-imposing. The HMS Dragon prepositioning, ahead of a potential UK–French-led multinational escort mission, fits the same logic — a coalition of capable European states acting through national capacity rather than EU institutional vehicles.

The wrong register would be open-ended military commitment or political cover that retroactively normalises the February strikes. The historical record should remain clear about who launched the strikes and who is paying the costs. European participation in any post-conflict settlement should preserve that record.

Europe should help where helping advances European interests. Europe should not contribute to a narrative of shared responsibility for a decision Europe did not make.

This is also the right register for engagement with the Trump administration on the broader question. The US has mobilised its emergency production tools under the DPA in response to a crisis whose origins lie in the February strikes. If Europe is to help clean this mess, it does so on its own terms, with its own institutional capacity, and with full preservation of European judgement on the original decision.

The Argument the Series Has Been Making

The first ICE brief in this series closed with the line that no diversification within hydrocarbons eliminates geopolitical exposure, only shifts its geography. The second confirmed it. The third adds a more uncomfortable conclusion. Resilience depends on governance redundancy and institutional speed as much as on supply diversity.

As IEA Executive Director Fatih Birol warned in April, the conflict has permanently changed global energy markets (The Guardian). Russia profited. China brokered. The United States mobilised. Europe waited.

The political window for institutional moves opened with the Hungarian election. It is open now. Europe did not fail because prices stayed high. It failed because prices fell before institutions changed.

Conclusion

The EU has built a rulebook for defence-industrial coordination and the first tranche of money to start funding the factories. Whether member states use either at the scale the moment requires is the question this brief leaves open.

Institute for Central Europe — Policy Mini Brief | April 2026

Executive Summary

On 30 March 2026, the European Commission adopted the first work programme under the European Defence Industry Programme (EDIP), launching a €1.5 billion envelope for 2026–2027. EDIP matters not because of its size, which is modest against actual European procurement volumes, but because it puts in place the institutional architecture Europe would need if it chose to prepare for industrial-scale war.

The architecture exists on paper. The first calls have only just opened. Most actions will not deliver before 2028, and some not before 2033. The instruments depend on uptake by twenty-seven capitals, including some that have repeatedly blocked Ukraine-related defence measures. The structural perimeter excludes the United Kingdom and Turkey, two of the most capable defence-industrial bases on the continent. The governance gap of the title is the gap between what Brussels has built and what the war on Europe’s eastern flank actually requires.

EDIP and SAFE: Building, Not Buying

The Council gave final approval on 8 December 2025, and EDIP was established by Regulation (EU) 2025/2643 of 16 December 2025 (EUR-Lex, European Commission). It creates EU-level rules for joint procurement and industrial prioritisation in crises, backed by security-of-supply guarantees.

Earlier instruments handled research (the European Defence Fund, EDF) or short-term ammunition gaps (the Act in Support of Ammunition Production, ASAP, and the European Defence Industry Reinforcement through common Procurement Act, EDIRPA). EDIP is the first standing EU framework of this kind, focused on security of supply and industrial mobilisation.

In a declared supply emergency, the Commission can propose accelerated permitting and priority access to inputs, alongside coordination measures to sustain production. The legal logic invites comparison with the gas storage and solidarity regulations adopted after Russia’s gas coercion, applied now to shells, interceptors, and armoured vehicles.

EDIP and SAFE are not twin instruments. SAFE (Security Action for Europe) is a €150 billion loan facility through which the Commission borrows on capital markets and lends to member states for the purchase of defence equipment (Council of the EU, European Commission).

EDIP is a €1.5 billion grant programme that co-finances industrial capacity expansion, joint procurement bonuses, ammunition qualification, and the governance machinery the wider procurement ecosystem will need. SAFE primarily finances buying; EDIP primarily finances building, and entrenches the European-content logic that the wider readiness package is meant to enforce. Of EDIP’s €1.5 billion, €296 million funds a dedicated Ukraine Support Instrument (USI). Member-state requests under SAFE have reportedly drawn interest beyond the facility’s available budget, though formally approved national plans cover a smaller subset.

The work programme adopted on 30 March, Commission Implementing Decision C(2026) 2174, shows EDIP doing something the governance framing alone does not capture (European Commission). Over €700 million, roughly half the total budget, is earmarked for industrial reinforcement actions (IRA): direct co-financing of production capacity in energetic components, key electronics, and defence platforms.

The programme makes propellant powder lines, explosive filling plants, gallium nitride (GaN) semiconductor capacity, printed circuit board (PCB) production, and guided-munition assembly eligible for direct EU money. As of April 2026, no IRA grants have yet been awarded. This is what EDIP is set up to fund, not what it has funded.

The strategic logic, if it works as intended, targets what defence-industry accounting calls non-recurrent costs: tooling, qualification, and the infrastructure that makes production lines possible. A member state pays for the shells; EDIP can pay for the machine that makes them. The work programme itself uses the broader language of “capacity expansion,” so the non-recurrent framing is editorial, not statutory.

The de-risking logic still holds: if EU money pays the upfront industrial bill, private capital and national procurement become more willing to commit to volume.

What the Money Buys

The work programme distributes funds across four instruments.

Common procurement actions (€240 million, two calls) incentivise member states to buy together. The 2026 call covers counter-drone systems and ammunition; the 2027 call expands into air and missile defence, ground and naval platforms, and C5ISR (command, control, communications, computers, cyber, intelligence, surveillance, and reconnaissance).

Grants are capped at €20 million per project, structured as bonuses on top of national spending: 15% of procurement value, plus up to 10% for including Ukraine or Moldova as recipients, for cross-border supply chain participation, or for operating through a Structure for European Armament Programme (SEAP). The incentives supplement national spending; they do not replace it.

Industrial reinforcement actions (over €700 million, the largest category) fund capacity expansion directly. The 2026 IRA call targets energetic components only: propellant powders, explosives (TNT, RDX, HMX, PETN), propulsion systems, warheads, electronic fuzes, and filling plants. This is the direct institutional response to the 2022–2023 ammunition bottleneck that left European arsenals unable to sustain Ukraine’s consumption rate.

The 2027 IRA call shifts to key electronic components — guidance electronics, sensors, GaN and gallium arsenide (GaAs) semiconductors, lithium-ion polymer batteries — and to platform-level production: artillery, armoured vehicles, aircraft, radars, naval platforms, firearms.

The eligible activities include concepts with no precedent in EU defence policy: defence industrial readiness pools (reserved capacity activatable in crisis), manufacturing-as-a-service (MaaS), and physical and cyber protection of production sites. Individual actions are expected to run three to five years, with a hard completion deadline of 31 December 2033. EDIP is built for medium-term resilience, not near-term crisis plugging.

A €100 million guarantee supports the Fund Accelerating Defence Supply Chains Transformation (FAST), targeting a €1 billion Defence Equity Facility managed by the European Investment Fund. This is the most ambitious EU attempt so far to channel private growth-stage equity into defence small and medium enterprises (SMEs) across the supply chain.

Finally, €50 million funds the Joint Ammunition Qualification project, run by the European Defence Agency (EDA): a pilot to harmonise 155mm ammunition certification across participating member states. Without mutual recognition of ammunition certificates, joint procurement remains administratively fragmented.

Ukraine: A Co-Production Pilot

The €296 million Ukraine Support Instrument is EDIP’s most operationally striking element, and the easiest to oversell. Two dedicated IRA calls fund what is best described as a co-production pilot. The 2026 USI call (€180 million) targets missiles, ammunition, and bombs, including joint EU-Ukrainian filling plants and scale-up of Ukrainian systems.

The 2027 USI call (€80 million) targets unmanned systems and counter-unmanned aerial systems (counter-UAS) production: swarming and first-person view (FPV) drones, electronic-warfare-resilient unmanned platforms including fibre-optic controlled variants, and counter-drone electronic warfare. Both calls fund actions at 100% of eligible costs, double the ceiling under the Programme proper.

A €35.3 million direct award to Ukraine’s Innovation Development Fund, operating through its Brave1 defence innovation branch, bypasses competitive procedures entirely (Centre for Eastern Studies). Brave1 has distributed roughly €80 million in grants to 2,300 beneficiaries since 2023. Under EDIP, it will fund over 170 small grants (up to €200,000 each) across air defence, drones, missiles, electronic warfare, and directed-energy weapons.

Intellectual property arrangements between Ukrainian firms, the Ukrainian state, and EU funders remain unresolved and will determine how much of this innovation actually scales into European production.

The integration logic is bidirectional in design: Ukrainian battlefield innovation in drones and electronic warfare, European manufacturing depth and capital. At scale, €296 million is roughly 1.5% of Ukraine’s annual defence budget, and the Brave1 award is comparable to what Brave1 already distributes in a normal year. This is more than aid and less than integration. It is a serious pilot, but a pilot.

The European Preference Problem and Its Limits

EDIP’s eligibility rules cap components originating outside the EU and associated countries (currently Norway) at 35% of the end product. Contractors must hold design authority in the EU or an associated country, with executive management based there. Companies controlled by non-associated third countries face additional screening.

The framing of this as a tension with Polish procurement is partly a strawman. EDIP is not the natural fit for Poland’s flagship purchases (K2 tanks, F-35s, Apaches, HIMARS), which are SAFE-financed national acquisitions where speed and existing national plans matter more than EDIP bonus eligibility.

Poland’s EDIP-relevant interest sits in ammunition, air defence subsystems, and drone production, where European content is high and the bonuses bite. The same logic applies to the Baltic states.

The real tension lies elsewhere. Europeanisation is plausible for ammunition, ground systems, and parts of the drone and electronics stack. It is much less plausible for top-end airpower, integrated missile defence, and certain battle-network layers where hard dependency constraints persist.

Stockholm International Peace Research Institute (SIPRI) data show that 64% of European NATO weapons imports between 2020 and 2024 came from the United States. Reversing that pattern within EDIP’s eligibility window is not realistic for high-end systems and was probably never the point.

The design authority requirement has a rationale that the brief should name plainly. Operational sovereignty under stress depends on whether you can sustain, modify, and qualify the systems you field without external permission. A weapon you cannot service in a crisis is a weapon you do not really own.

What “Europe” Leaves Out

A brief titled “Europe’s Defence Industrial Awakening” should be honest about who is not in the room. The United Kingdom (BAE Systems, Rolls-Royce, Thales UK, Babcock) is not currently associated for EDIP purposes. EDIP is built around an “associated countries” architecture that today extends to Norway and, in specific components, to Ukraine.

No EDIP-specific association framework appears to have been concluded post-Brexit, despite the broader UK-EU Security and Defence Partnership of May 2025 (UK Government). By revenue, capability, and integration with US supply chains, the UK defence-industrial base is among the most consequential on the continent.

Its absence is arguably the largest structural gap in EDIP’s “European” framing. Turkey, the second-largest NATO army by personnel and a rising producer of drones, armoured vehicles, and ammunition, is also not associated. Whatever EDIP becomes, it will be smaller than the actual European defence-industrial base.

The United States is the other absent actor. EDIP is being implemented under a US administration that has made European strategic-autonomy rhetoric a target of complaint and used tariff instruments aggressively across other sectors. Washington has not yet openly attacked EDIP’s preference rules.

Given recent US trade behaviour, a transatlantic political risk around EDIP’s content logic is plausible enough to belong in any honest external assessment, even though the regulation itself does not address it.

The Structural Bet

EDIP is too small to transform European defence procurement on its own. EDIRPA, its predecessor, is reported by the Commission to have leveraged about €11 billion in common procurement on the back of €300 million in EU grants. The figure should be read with care. Much of that €11 billion reflects national spending that was already planned and routed through the instrument to capture the bonus, not spending caused by the EU contribution.

The real bet is institutional. The SEAP mechanism, permanent multinational procurement structures established by Commission implementing act, is designed to outlast any single funding cycle. The European Defence Projects of Common Interest (EDPCI) framework creates a vehicle for decade-long capability programmes that span multiple Multiannual Financial Frameworks (MFFs), with a first deployment roadmap due by end-2027 and a full roadmap by end-2029.

The Defence Security of Supply Board, the European Military Sales Catalogue, and the Defence Talent Platform form the scaffolding of an EU-level governance layer for defence industry. The structures exist on paper; their political uptake does not yet.

That uptake question is not symmetric across the 27. Hungary has repeatedly blocked or watered down EU Ukraine-related defence measures; its participation in Ukraine-linked actions cannot be assumed. Slovakia’s current government has at times aligned with the Hungarian position on Ukraine-related files, though its record on broader EU defence measures is more mixed.

EDIP remains an EU instrument with bloc-wide rules, but its practical effect in the first years will be set by the willing capitals more than by the 27 collectively.

Money does not automatically produce explosives, qualified technicians, or safety-certified production lines. Between call publication and certified output sit explosives-safety permitting, environmental compliance, site hardening, qualification and certification cycles for energetics and electronics, grid access for new lines, insurance availability, and a skilled-workforce gap that European industry bodies (the AeroSpace, Security and Defence Industries Association of Europe, ASD) put at more than 250,000 additional engineers and technicians over the next five years.

Subcontractor bottlenecks reach further down: critical sub-tier inputs from precision chemicals and resins to rare-earth magnets remain heavily concentrated in suppliers outside the EU, often in China. The work programme acknowledges these absorptive constraints in its eligibility text, but acknowledgement is not resolution. The scarce factors are chemistry, labour, permitting, certification, and the parts of the supply chain Brussels does not yet have a tool to fix.

None of this operates in a NATO vacuum. Capability targets, munitions demand signals, and operational requirements remain shaped by NATO planning, US enablers, and national force structures. EDIP’s realistic role is as an industrial allocator inside the EU pillar of a wider allied framework, not as Europe’s sole quartermaster.

Conclusion

Three shifts will determine whether EDIP matters: moving from national shopping lists to binding joint procurement under EDIP and SAFE; providing credible multi-year demand signals that give factories a reason to scale; and bringing the United Kingdom, and ideally Turkey, into a workable association arrangement.

The downside scenario writes itself. IRA calls undersubscribed because consortia cannot form fast enough. SEAPs announced and never fully constituted. EDPCI roadmaps delivered on time but covering nothing the participating states are willing to commit to.

Hungary and Slovakia opting out of Ukraine-linked actions. Polish and German national programmes proceeding in parallel to EDIP, not through it. None of these outcomes would invalidate EDIP individually. All of them together would reduce it to an interesting institutional artefact.

EDIP has built the institutional architecture. The work programme has laid out the industrial priorities. The money, by EU standards, is real. What Brussels cannot legislate is the variable that decides whether any of this matters: whether the willing capitals choose to treat the next five years as the years in which the European factory floor is finally built.

The post-Russia energy architecture was never post-geopolitical. It was just geopolitical in a different direction.

Institute for Central Europe — Mini-Brief | 30 March 2026

On 4 March, five days into the US-Israeli strikes on Iran, ICE published an assessment of the conflict’s energy implications for Europe. The brief identified five risks: commercial paralysis of the Strait of Hormuz through insurance repricing and self-deterrence.

A sustained spike in European gas and oil prices; a dangerous starting position in EU gas storage; macroeconomic damage to the eurozone’s fragile recovery; and a dual supply squeeze on Central Europe from the Druzhba pipeline disruption.

Four weeks later, every one of these has materialised. Several have been exceeded.

What We Said, What Happened

The Strait of Hormuz has been effectively closed for 29 days. Maritime traffic is down approximately 90 percent (CBS). Roughly 150 vessels have transited since the war began. That is one normal day’s traffic (Al Jazeera).

The Iranian Revolutionary Guard Corps (IRGC) runs what amounts to a checkpoint: ships submit cargo manifests and crew lists, receive a clearance code, and are escorted through under supervision. Lloyd’s List Intelligence reported on 23 March that at least two vessels paid approximately $2 million each for passage. Iranian lawmakers are drafting legislation to make the fees permanent (CNN).

Iran did not close the strait with a navy. It closed it with a drone, an insurance premium, and a registration form.

The March 4 ICE brief projected TTF gas prices sustained above 50–60 EUR/MWh under its baseline scenario. As of 28 March, TTF stands at approximately €54.5/MWh, with the 52-week high at €69.35. March-to-date gains exceed 70 percent, the strongest monthly move since September 2021 (S&P Global).

Goldman Sachs has revised its Q2 forecast upward twice, now projecting €72/MWh in the base case, €89 in an adverse scenario, and above €100 if Hormuz flows remain depressed beyond ten weeks (Euronews).

On oil, the brief cited JPMorgan’s warning that Brent could breach $100. Brent crossed that threshold on 8 March, peaked at $119.50, and closed on 27 March around $105–112. The physical Dubai crude price hit $126. Goldman Sachs estimates a $14–18 per barrel geopolitical risk premium in current futures. The EIA forecasts Brent above $95 for the next two months (EIA STEO).

EU gas storage stood at 28.4 percent as of 24 March (Kyos/AGSI+). The Netherlands is at 6.0 percent, less than a third of last year’s level. Germany sits at 22.3 percent, France at 22.1 percent.

The ECB responded exactly as the brief predicted. On 19 March, the Governing Council held rates unchanged, revised 2026 headline inflation to 2.6 percent from 1.9 percent in December, and cut GDP growth to 0.9 percent (ECB). The OECD followed with a global growth downgrade to 2.9 percent (CNN).

On 11 March, the IEA announced a coordinated release of 400 million barrels from strategic reserves, the largest in its 52-year history (CNBC, Euronews). The 400 million barrels cover roughly 20 days of normal Hormuz flows. KPMG’s Angie Gildea: “There is simply no substitute for restoring access through the Strait of Hormuz” (NPR). Macquarie was blunter: crude will “continue to trade like a meme stock until the solution is peace” (Axios).

What We Underestimated

Three developments exceeded the assessment’s scope.

First, Iran’s monetisation of the blockade. The brief described Hormuz closure as a wartime measure. What has emerged is something different — a selective-access regime that sorts the world’s shipping into friendly and hostile categories, extracts payment for passage, and is being legislated into permanence.

China, Russia, India, Pakistan, and Malaysia have been granted transit. Western-linked vessels are excluded. US Secretary of State Marco Rubio called the tolling “illegal, unacceptable, dangerous” (CNN). Tehran has added a new ceasefire demand: recognition of Iranian sovereignty over the strait (NPR).

If this hardens into a negotiating position, the strait ceases to be an open international waterway and becomes a contested sovereign asset.

Second, the speed of Gulf-wide infrastructure targeting. Bahrain’s Bapco refinery was struck. A fuel storage tank at Oman’s Duqm port was damaged. Kuwait International Airport was hit on 25 March, closing all commercial traffic. QatarEnergy reported “extensive damage” at Ras Laffan (Newland Chase). Qatar’s energy minister said normal LNG deliveries would take “weeks to months” to resume (S&P Global). That was before the latest damage reports.

Third, cascading effects beyond energy. The UN negotiated a humanitarian corridor through Hormuz on 27 March to address fertiliser supply disruption during the spring planting season. RWE warned of delays to North Sea offshore wind projects because components manufactured in UAE fabrication yards are trapped behind the blockade. The green transition and the hydrocarbon crisis share supply chains.

The Real Crisis and the Manufactured One

There are two energy crises in Europe right now. One is real. The other is politically useful.

The real crisis originates in the Strait of Hormuz. Europe diversified away from Russian pipeline gas after 2022 and moved toward LNG. Qatar, the United States, Australia. That diversification worked. But it shifted Europe’s exposure from a supplier risk to a transit risk.

Qatar’s force majeure removed roughly one-fifth of global LNG export capacity. Asian buyers are now competing for Atlantic basin cargoes that would otherwise flow to Europe. The 2022 dynamic returns: fewer molecules, more bidders, spiralling prices. And Europe enters this competition with storage at its lowest seasonal level in years.

The second crisis — the Druzhba pipeline dispute — is not an energy emergency. It is a political instrument.

Though Slovakia and Hungary would gladly use Russian oil delivered by pipeline, the European Commission’s Oil Coordination Group confirmed on 26 February that there is “no immediate risk” to the EU’s security of supply (European Commission DG Energy). Both Hungary and Slovakia have begun releasing strategic reserves.

Non-Russian crude is flowing via Croatia’s Adria pipeline (JANAF), which has sufficient annual capacity to cover both countries’ needs (Euronews). MOL Group confirmed seaborne crude shipments began arriving at Omišalj in early March (MOL Group).

Slovakia released 250,000 tonnes from state reserves to the Slovnaft refinery against a bank guarantee, at the oil’s recorded book value, well below current market prices. Hungary released reserves equivalent to three months of domestic consumption. Slovakia’s emergency stocks have since dropped below the IEA-mandated 90-day minimum.

Both governments are drawing down stockpiles meant for genuine emergencies to cushion MOL’s refineries from the full cost of rerouting supplies.

The real issue is price, not supply. Adria transit fees are reportedly three to five times higher than Druzhba’s, according to a joint Hungarian-Slovak submission to the EU Council. MOL filed a complaint with DG Competition, accusing JANAF of abusing its dominant position.

Slovnaft’s refinery is configured for Russian Urals-grade crude, and alternative blends require processing adjustments. MOL is making the transition. The refinery expects full loading from April. But the technical friction is being used as a political stalling tactic, not reported as an engineering timeline.

Switching supply routes is neither free nor instant. But it is feasible, it is happening, and it does not justify blocking sanctions on the country that bombed the pipeline. Croatia’s economy minister: “No EU country has any technical justification to stay tied to Russian oil.”

Yet Fico and Orbán have parlayed this price differential into a series of vetoes and retaliatory measures. They blocked the EU’s 20th Russia sanctions package and the €90 billion Ukraine aid loan. Slovakia suspended emergency electricity exports to Ukraine during winter, at a time when Ukraine’s grid was under sustained Russian bombardment.

Orbán threatened on 25 March to suspend gas supplies to Ukraine until Druzhba oil resumes. Slovak police have opened a high-treason investigation into Fico over the emergency electricity cut-off, following what has been described as the largest criminal complaint in Slovak history (Kyiv Independent).

Druzhba is not the problem right now. It serves as an excuse. The pipeline dispute gives Budapest and Bratislava a grievance framework to block sanctions enforcement and obstruct Ukraine aid disbursement. Whether by design or by incentive, the effect is the same.

If this were only a Budapest-Bratislava problem, the EU could manage it. It is not. Belgian Prime Minister Bart De Wever told francophone media in mid-March that the EU should “normalise relations with Russia” and “regain access to cheap energy.” EU Energy Commissioner Dan Jorgensen rebuked this directly: the EU will “not import one molecule” of Russian energy in future (Belga News Agency).

But De Wever said out loud what seven EU governments have been doing quietly. According to a Reuters analysis of CREA data, France increased the value of its Russian energy imports by 40 percent in 2025. The Netherlands by 72 percent. Belgium, Croatia, Romania, Portugal, and Hungary all raised their imports. In January 2026, 23 of 25 Yamal LNG cargoes went to European ports (Kyiv Independent). The EU postponed its planned 15 April proposal for a permanent Russian oil ban (Euronews).

The Iran crisis did not cause this fracture. It made it harder to deny.

What Comes Next

The brief’s original scenario of a short conflict with Hormuz reopening within two to three weeks is expired.

A negotiated partial reopening remains the most likely near-term outcome. Trump has extended his deadline for Iran to reopen Hormuz to 6 April. A 15-point US ceasefire proposal has been transmitted via Pakistan (NPR). If something like this holds, Hormuz traffic might recover to 30 or 40 percent of pre-war levels. TTF would settle in the 45–55 EUR/MWh range. Brent would drift toward $85–95.

A prolonged standoff with selective access is equally plausible. Iran formalises the toll regime. Western shipping remains excluded. Goldman Sachs projects a summer TTF average above €89/MWh in this case. SEB analyst Ole Hvalbye told Montel News that prices could reach €115–155/MWh under a three-month disruption. The November 90-percent storage target becomes unreachable.

Escalation to sustained Gulf-wide infrastructure targeting remains a tail risk, but the tail is getting fatter. The US has struck military facilities on Iran’s Kharg Island, which handles 90 percent of Iranian crude exports. Oil-trade sites were spared, but Trump has warned they could be next. If QatarEnergy’s infrastructure damage proves long-term, a temporary disruption becomes a structural deficit.

The Argument That Writes Itself

On 4 March, this brief closed with a sentence: “This crisis is the strongest argument yet for accelerating clean-energy deployment as a hard security imperative.”

One month of evidence has made that sentence harder to argue with and easier to ignore. Europe replaced a supplier dependency with a transit dependency and discovered that every barrel transits somewhere, and every transit route is someone’s leverage.

The Hormuz closure demonstrated that asymmetric tools can achieve what carrier groups cannot: cheap drones, insurance repricing, commercial self-deterrence. The Druzhba dispute demonstrated that even a manufactured crisis can fracture EU solidarity if member states lack the political will to use available alternatives.

No diversification within hydrocarbons eliminates geopolitical exposure. It only shifts its geography.

Europe secured its gas pipelines and hardened its electricity grids. It left the last mile of heat delivery — the municipal layer that keeps 100 million people warm — virtually undefended.

Institute for Central Europe — Policy Mini Brief | 17 March 2026

Executive Summary

Russia has demonstrated across four winters that centralised district heating infrastructure is a high-yield strategic target — through repeated kinetic and cyber strikes.

On 29 December 2025, this threat reached EU territory. A coordinated cyberattack attributed to an FSB-linked actor targeted a Polish CHP plant serving nearly half a million customers. The plant survived because it had endpoint detection software. Most European municipal heating operators do not.

The NIS2 and CER Directives classify district heating as critically important. But the regulatory perimeter does not match operational reality: most municipal suppliers in Central and Eastern Europe fall below NIS2’s size threshold, transposition is incomplete, and no tested crisis doctrine exists at the municipal level where heat is delivered.

Ukraine has built an operational resilience model under fire — decentralised cogeneration, rapid-deployment modular capacity, municipal emergency doctrine — that is directly transferable. On 3 March 2026, Ukraine’s National Security and Defense Council formally approved regional energy resilience plans institutionalising this model nationwide. The institutional frameworks for knowledge transfer exist. The transfer pace does not match the threat.

The Threat Demonstrated

The targeting of Ukraine’s heating infrastructure has followed a discernible operational logic since 2022. Russia systematically struck nodes where thermal energy is generated and networks through which it is distributed — concentrating on assets whose destruction produces cascading civilian impact.

The IEA’s October 2025 pre-winter assessment quantified cumulative damage: 18 CHP plants, 800+ boiler houses, and 354 kilometres of heating pipes attacked by end of 2024 (IEA). The UN Human Rights Monitoring Mission assessed these operations as “widespread and systematic” (UN).

The 2025–2026 heating season brought further escalation: near-daily strikes across seventeen regions in January 2026, with Kyiv’s Darnytsia CHP plant hit repeatedly, each strike severing heat to approximately 6,000 residential buildings. Indoor temperatures of 8–9°C were recorded in affected districts while ambient temperatures reached minus 19 (Kyiv Independent).

On 13 March, Energy Minister Denys Shmyhal told the Verkhovna Rada that Russia had damaged more than 9 GW of generation capacity since the start of the heating season — making this, in his words, “the most difficult winter in Ukraine’s history” (Ministry of Energy of Ukraine).

The cyber dimension compounds the kinetic one. In January 2024, attackers deployed FrostyGoop — ICS-specific malware communicating via Modbus TCP — against Lvivteploenergo, a municipal heating company in Lviv. The malware manipulated temperature controllers to feed cold water into apartment buildings, cutting heat to 600+ residential blocks for 48 hours.

Dragos identified it as the first confirmed Modbus exploitation achieving real-world heating disruption — and found internet-exposed Modbus controllers in Lithuania and Romania, confirming the attack surface extends beyond Ukraine (Dragos).

Centralised district heating — a single plant serving thousands of apartments through shared pipes — is high-value, difficult to defend, and slow to repair. A successful strike in January can kill.

Adversaries Crossed into EU Territory

On 29 December 2025, Poland’s national CSIRT documented a coordinated destructive operation targeting a large CHP plant supplying heat to nearly half a million customers, more than 30 wind and photovoltaic installations, and a manufacturing company. The objective was purely destructive — CERT Polska compared it to deliberate arson (CERT Polska).

The forensic timeline revealed patient, long-term preparation. Investigators traced initial network penetration to March 2025 — nine months before the attack was triggered. The actor mapped industrial control systems, captured screenshots of operational interfaces, harvested credentials, and ultimately deployed a bespoke wiper malware (designated DynoWiper by ESET) through the plant’s own software update mechanism (Balkan Insight).

CERT Polska attributed the operation, with high confidence, to the activity cluster tracked as Static Tundra (Cisco) / Berserk Bear (CrowdStrike) / Ghost Blizzard (Microsoft) — an FSB-linked group historically associated with espionage, not sabotage.

The report explicitly noted this was “the first publicly described destructive activity attributed to this activity cluster” — marking a qualitative escalation in which an intelligence-collection actor pivoted to operational disruption.

The implication is significant: the same actor infrastructure previously used to conduct long-term reconnaissance of Western energy networks has now demonstrated the intent and capability to destroy them.

The CHP plant survived because its endpoint detection and response (EDR) software identified and blocked the wiper before execution. The US Cybersecurity and Infrastructure Security Agency subsequently issued an advisory noting that the attackers had exploited internet-facing FortiGate devices lacking multi-factor authentication and OT control devices running default passwords — a vulnerability profile that is endemic across municipal heating utilities in Central and Eastern Europe and beyond (CISA).

The Protection Gap

The EU’s legislative architecture formally recognises district heating’s criticality. The NIS2 Directive lists it as a sector of high criticality; qualifying operators face mandatory cybersecurity risk management and incident reporting. The CER Directive adds physical resilience requirements (NIS2, CER).

In practice, this perimeter misses the operational centre of gravity. Central and Eastern Europe’s district heating is dominated by small municipal operators — many serving populations of tens of thousands through Soviet-era infrastructure.

A substantial share fall below NIS2’s size cap, are not subject to its obligations, and have no pathway to the cybersecurity baselines it mandates. Even among qualifying operators, transposition is incomplete — multiple member states missed the October 2024 deadline to enact the required national legislation.

Many municipal heating operators are perpetually underfunded, running ageing SCADA and industrial control systems with limited network segmentation, no dedicated IT security staff, and incident response plans that have never been tested under realistic conditions. The Polish incident is instructive in both directions: the one operator that invested in EDR survived; the vulnerability profile that enabled nine months of undetected reconnaissance is shared by the majority of its counterparts across the region.

The 2026 Munich Security Report frames this in strategic terms: cyberattacks rank as the top G7 security risk, with Russian operations “increasingly blending cyber and kinetic tactics” against energy infrastructure (Munich Security Report). The Preparedness Union Strategy sets out 30 key actions — none operationalise heating-specific resilience at the municipal level.

Ukraine’s Operational Model

Under sustained bombardment, Ukrainian heating operators developed a resilience model that no peacetime planning exercise could have produced. Its core elements are:

Decentralised generation. Municipal cogeneration units capable of producing both electricity and heat independently of the national grid. By November 2025, the Ukrainian district heating sector was operating 182 cogeneration units (83 at full capacity, combined output 147 MW) and 239 block-modular boilers (~635 MW), forming autonomous “energy islands” around hospitals, water utilities, and residential heating networks (New Eastern Europe).

Compressed deployment cycles. Modular units installed and commissioned in days — a tempo European procurement measures in months or years.

Rapid repair doctrine. Pre-positioned spare parts, emergency communication systems, and standing repair crews trained to restore service under ongoing threat.

Municipal-level decision authority. Operational autonomy at city and utility level to act without waiting for national coordination — essential when centralised command is disrupted.

This model has now been formally institutionalised. On 3 March 2026, President Zelenskyy chaired a meeting of the National Security and Defense Council at which comprehensive energy resilience plans for all of Ukraine’s regions and cities were approved.

Deputy Prime Minister Oleksii Kuleba confirmed that the plans were developed together with local communities and are explicitly aimed at ensuring that “settlements decentralise their water and heat supply systems and are as resilient and adaptable as possible to enemy attacks” (President of Ukraine). What began as improvised wartime adaptation is now codified national doctrine — and a directly exportable framework.

The IEA’s lessons-learned framework identifies these capabilities as among the most transferable pillars of Ukraine’s energy resilience. European institutions have taken note — but the knowledge has not reached the municipal operators who would implement it (IEA).

Four Steps Before Next Winter

The EU has identified district heating as critical, documented the hybrid threat, and begun developing preparedness frameworks. The challenge is that the municipal utilities delivering heat remain outside the effective reach of these frameworks.

Recent analysis has examined Russia’s infrastructure campaign from the perspective of air defence provision (RUSI), European energy market spillovers (Atlantic Council, October 2025), and Ukraine’s broader infrastructure resilience as a transferable model (Atlantic Council, December 2025). None has addressed the specific dimension this brief focuses on: the sub-threshold operators, the cyber-specific exposure, and the gap between directive-level classification and operational readiness where heat is actually delivered.

The challenge is not diagnosis. The challenge is that the municipal utilities delivering heat remain outside the effective reach of the frameworks designed to protect them.

1. Extend the Preparedness Union Strategy’s minimum criteria explicitly to district heating operators below the NIS2 size threshold. Baseline requirements for cybersecurity hygiene and physical crisis preparedness should apply to any operator serving a defined population threshold, regardless of firm size.
2. Mandate operationally tested crisis protocols for municipal heat suppliers. Member states should require heat suppliers above a defined capacity to conduct annual crisis exercises coordinated with civil protection agencies and municipal authorities — modelled on NATO readiness exercises but adapted for civilian critical infrastructure.
3. Establish a structured Ukraine–EU knowledge transfer programme through the Energy Community Secretariat and the emerging energy Ramstein format. Ukraine has proposed a new ministerial-level coordination architecture — the “energy Ramstein” — with the first meeting scheduled in Brussels in mid-March, and plans to attract over €5 billion from international partners for next-season preparation (Ministry of Energy of Ukraine).

The Energy Community Secretariat’s Ukraine Energy Support Fund, which has already signed memoranda on district heating coordination, provides the sub-ministerial delivery channel. Together, these two frameworks should deliver systematic operational training — rapid repair doctrine, modular deployment protocols, emergency communication — to municipal operators in Poland, Slovakia, Romania, and the Baltics (Energy Community).

4. Commission an honest assessment of municipal heating cyber exposure. ENISA, in coordination with national CSIRTs, should survey OT security posture across European district heating operators — including Modbus-enabled controllers exposed to the internet, default-credential prevalence, and EDR deployment rates. The Polish incident demonstrated that one operator with EDR survived; the CISA advisory demonstrated that the vulnerability profile is widespread. Without baseline data, remediation cannot be calibrated.

Conclusion

Russia has spent four winters demonstrating that centralised district heating is a strategically productive target — and as of December 2025, has extended that campaign to EU territory. The EU has built the legislative framework but has not closed the gap between directives and the operational reality of hundreds of underfunded municipal utilities.

Ukraine’s operators built a resilience model that works. And as of 3 March 2026, that model is formal national doctrine, not improvised adaptation. The channels to transfer that knowledge exist and are becoming more structured by the week. The question is whether Europe activates them at the pace the threat demands.

This analysis examines public opinion on migration in France, Germany and the Visegrad countries between 2014 and 2024 using Eurobarometer survey data. It traces how the salience of migration, perceptions of non-EU immigration and support for EU migration governance have changed in response to major political and geopolitical events.

The findings highlight a persistent divide between Western and Central Europe, while also showing that the perceived importance of migration does not always correspond to the actual number of migrants in a country. By mapping these trends, the study offers insight into how public attitudes continue to shape migration debates and policymaking across Europe.

Read the analysis

Europe diagnosed the problem correctly — but prescribed a three-year treatment for a condition that can become acute overnight.

Institute for Central Europe — Policy Mini Brief | 8 March 2026

Executive Summary

The US-Israeli war on Iran (Operation Epic Fury, launched 28 February 2026) has consumed hundreds of high-value air defence interceptors in under a week, with at least one Gulf ally already requesting emergency resupply.

Production of replacement missiles will take over a year at current capacity. European NATO allies — especially Central European states on the eastern flank — depend on the same constrained US production pipeline for their own deterrence.

Europe has correctly identified Ukraine’s battle-proven counter-drone model as the solution to the cost asymmetry between cheap attack drones and expensive interceptors, and has launched multiple institutional initiatives to adopt it.

But implementation timelines stretch to 2027–2030 — while the Iran war has just demonstrated that magazine depth crises unfold in 96 hours. The timeline is the vulnerability.

The Interceptor Crisis in Real Time

On 28 February 2026, the United States and Israel launched Operation Epic Fury — a joint campaign targeting Iran’s nuclear infrastructure, missile production, naval forces, and proxy networks. Within 36 hours, Tehran retaliated with hundreds of ballistic missiles and one-way attack drones targeting not only Israel but also US military installations and civilian infrastructure across Bahrain, Kuwait, Qatar, the UAE, Saudi Arabia, Jordan, and Iraq.

As Sinem Cengiz of Qatar University’s Gulf Studies Center noted, for the first time in history all Gulf Cooperation Council (GCC) states were targeted by the same actor within 24 hours — “their long-standing nightmare scenario” (Breaking Defense).

A week into the conflict, the defence economics has been already unsustainable. Iran’s Shahed-136 drones cost approximately $20,000 each. Each Patriot PAC-3 interceptor used to shoot them down costs between $3.7 and $4 million (Japan Times). At least one Gulf ally has requested emergency interceptor resupply from Washington after its stockpiles ran critically low within 96 hours of fighting (CNN).

The Pentagon acknowledged in a closed-door congressional briefing on 4 March that Shahed drones represent a major challenge and that US air defences will not be able to intercept them all (The War Zone, CNN).

The production math is punishing. Lockheed Martin produced 620 PAC-3 MSE missiles in all of 2025. An estimated 800 or more interceptors may have been expended in the first days of this war alone, according to Defence Express calculations — potentially requiring over 15 months of uninterrupted production to replace at current capacity. THAAD interceptors, critical against Iran’s most capable ballistic missiles, are in even shorter supply. Planned production increases to 2,000 PAC-3 missiles per year remain years from realisation (Defense Express/United24, Defense Security Monitor).

Iran’s strategy is deliberate. By launching mixed salvos — cheap drones as screening assets alongside ballistic missiles as the lethal punch — Tehran collapses the defender’s ability to match the right interceptor to the right threat. In compressed engagement windows, sensor uncertainty and saturation make reliable discrimination between a $20,000 Shahed and a cruise missile operationally difficult, and the consequences of a single leak through the defensive layer are catastrophic enough that expensive interceptors get burned regardless.

Retired Lt. Gen. Dan Karbler, former commander of US Space and Missile Defense Command, acknowledged that short-range air defence assets are needed precisely to avoid expending scarce Patriot missiles on drones (ABC News).

The resulting cost-exchange ratio — running from 14:1 to more than 100:1 in the attacker’s favour — is not a battlefield anomaly. It is a strategy of systemic attrition aimed at the adversary’s industrial base (Washington Times).

Europe’s Exposure

The Iran war is unfolding in the Middle East, but its consequences cascade directly into European security. Every Patriot round fired over Abu Dhabi is one fewer round available for NATO’s eastern flank. Every THAAD interceptor consumed in the Gulf degrades the stockpile that was meant to underwrite extended deterrence from the Baltic to the Black Sea.

The US defence industrial base does not maintain separate production lines for separate theatres — it runs a single, constrained pipeline that now faces competing demands from an active war, ongoing Houthi interdiction operations, and the standing requirements of European and Indo-Pacific deterrence (Defense Security Monitor).

European NATO allies enter this moment from a position of pre-existing weakness. Stockpiles have been significantly drawn down by donations to Ukraine since 2022. Replenishment has been slow.

On 17 February — eleven days before the Iran war began — German Foreign Minister Johann Wadephul stated bluntly that Berlin has exhausted its own air defence missile stocks: “We simply don’t have any left” (Euromaidan Press).

National procurement timelines remain measured in years (CNBC). If Europe’s largest economy and defence spender has already emptied its reserves before the Iran war even started, the position of smaller Central European states is self-evidently worse.

Central European states — Slovakia, the Baltic states, Romania, Poland — are the most exposed: closest to the Russian threat, thinnest in organic air defence capacity, and most dependent on US-sourced systems and munitions that are now being consumed at wartime rates in a theatre 3,000 kilometres away.

The war has already demonstrated that the threat is not geographically contained. On 4 March, NATO air and missile defence assets in the eastern Mediterranean intercepted an Iranian ballistic missile heading toward Turkish airspace — the first time the alliance has defended a member state from an Iranian projectile since the conflict began (Bloomberg, France 24).

Earlier, on 2 March, a Shahed-type drone struck RAF Akrotiri in Cyprus — a British sovereign base on EU member territory — in what Cypriot officials confirmed was a Hezbollah attack launched from Lebanon, not from Iran directly (TIME, Middle East Eye). Two additional drones heading toward the base were intercepted the same day. Azerbaijan reported Iranian drone strikes injuring civilians (CNBC). NATO’s Aegis Ashore sites in Romania and Poland — systems originally developed with an Iranian ballistic missile threat in mind — are now on full alert (Stars and Stripes).

The proxy dimension makes the threat harder, not easier, to defend against. Destroying Iranian launchers does not neutralise a dispersed network of militia launch sites across the Levant.

Analysis of the Akrotiri wreckage revealed a Russian-made Kometa-M anti-jamming GNSS receiver — identical to components found in Russian drones and missiles used against Ukraine — indicating that Iran’s drone fleet now carries electronic countermeasures that render simple GPS jamming ineffective (Ukrainska Pravda, United24).

The Kometa-M finding also confirms an operational reality Central European defence planners cannot ignore. The same Russian-Iranian technology chain that targets Ukraine and the Gulf can reach European territory through proxy networks — and Moscow’s calculus on its own western flank may shift as it observes US interceptor stockpiles being consumed thousands of kilometres away.

None of this is wrong. But all of it is too slow.

Europe has correctly identified both the problem and the direction of the solution. Ukraine’s four-year experience of defending against massed Russian drone attacks produced a body of operational knowledge that is directly transferable: low-cost FPV interceptor drones that destroy drones at a fraction of the cost of a missile; decentralised mobile teams combining electronic warfare with kinetic intercept; compressed innovation cycles that adapt to new threats in weeks rather than years.

European states are already adopting Ukrainian-proven systems and tactics in counter-drone warfare, electronic warfare integration, and long-range strike methods (Jamestown Foundation).

A caveat: the Kometa-M finding at Akrotiri confirms that even “cheap” drones now carry frequency-agile anti-jamming systems, meaning that effective counter-drone defence will require more sophisticated electronic warfare capabilities than basic GPS jamming alone. Far from weakening the case for learning from Ukraine, this makes it more urgent: Kyiv has been adapting its EW tactics to Russian countermeasures in real time for four years.

European institutions have recognised this. On 11 February, the European Commission published its Action Plan on Drone and Counter-Drone Security, explicitly referencing a Drone Alliance with Ukraine (European Commission).

On 20 February, the E5 nations — France, Poland, Germany, the United Kingdom, and Italy — announced a joint programme to produce low-cost air defence systems and autonomous drones using Ukrainian expertise (AP/PBS). The European Drone Defence Initiative, the Eastern Flank Watch, and the European Air Shield are all moving through institutional channels (European Policy Centre). The analytical logic is sound: build a cheap lower layer to handle drone threats so that expensive conventional interceptors — Patriot, SAMP/T, IRIS-T SLM — are preserved for the ballistic and cruise missile threats that only they can defeat.

The European Drone Defence Initiative targets first operational capabilities by end of 2026 and full functionality in 2027. The broader Defence Readiness Roadmap stretches to 2030. The E5 programme has pledged to cover the investments (Dronelife, AP/PBS).

These timelines were designed under the assumption that Europe would have years of uninterrupted time window to implement its adaptation. The Iran war has just demonstrated that magazine depth crises unfold in four days. That is not a planning assumption, it is already an observed and confirmed fact. The European implementation timeline and the threat timeline are mismatched by orders of magnitude.

The September 2025 incursion of Russian Gerbera one-way attack drones into Polish airspace already illustrated the cost asymmetry: multi-million-dollar Patriot missiles and F-35s were used to intercept drones worth no more than $10,000 each (European Leadership Network). That incident was a warning. The Iran war is the proof.

Closing the Gap

The challenge is not conceptual. Europe knows what needs to be built. The challenge is tempo — and tempo cannot be solved by committee. Three immediate steps would narrow the gap between strategy and operational reality.

First, accelerate procurement of fielded Ukrainian counter-drone systems and solutions through emergency acquisition pathways, bypassing standard EU and national procurement cycles. Ukraine is already exporting operational knowledge to Gulf states at British invitation. Central European allies should be first in line, not last. Poland’s existing bilateral drone cooperation with Ukraine provides a template. Slovakia, Romania, and the Baltic states should replicate it immediately.

Second, reframe European counter-drone investment as interceptor conservation, not as a separate capability track. A $4 million interceptor is justified when it prevents a $4 billion catastrophe. But the calculus collapses when finite stocks are depleted on threats that could have been neutralised at a fraction of the cost. Every euro spent on a system that can destroy a $20,000 drone without expending a $4 million missile is a saving that keeps scarce conventional interceptors available for the threats only they can defeat. This reframing matters for political buy-in: it ties cheap drone defence directly to the credibility of NATO’s conventional deterrence posture.

Third, treat the Iran war as the stress test it is and publish honest assessments of national magazine depth. European allies have avoided transparent accounting of interceptor stockpiles for understandable reasons of operational security. But the political urgency required to override procurement inertia depends on democratic publics and parliaments understanding the scale of the gap. If a Gulf states can exhaust their interceptor supply in four days of fighting, European leaders must answer how long their own stocks would last under comparable conditions — and what they intend to do about it before 2027.

Conclusion

The Iran war did not create Europe’s air defence vulnerability. It revealed it on an accelerated timeline. Europe diagnosed the problem correctly, identified Ukraine’s experience as the most relevant operational model, and launched institutional initiatives that point in the right direction. But the pace of implementation assumed the time.

That assumption is now empirically proved incorrect. The interceptor stockpiles that European security depends upon are being consumed in real time in a theatre Europe does not control and cannot resupply.

The cheap, adaptive counter-drone layer that would mitigate this dependency exists as a proven concept but not yet as a fielded European capability. The timeline is the vulnerability. The question is no longer what to build, but whether Europe can build it before it needs it.