The bomb on the drone found beside a Ukrainian Antonov An-124 at Leipzig/Halle Airport contained the plastic explosives Semtex and PETN, German press agency dpa reported Thursday, and the Leipziger Volkszeitung puts the recovered charge at as much as 800 grams (1.8 pounds). The detonator failed. That failure is the only reason this week’s updates are forensic rather than fatal: the device sat a few meters from the parked freighter, unnoticed, for roughly four hours.

Since DroneXL’s first report on the discovery Thursday morning, every detail investigators have added points the same way. The explosive is military class, and Federal Interior Minister Alexander Dobrindt assesses the drone was probably modified to deliberately slip past the airport’s protection systems. Airport cameras show it crossed the fence hours before anyone saw it.

A quadcopter is cheap. What was strapped to this one is not, and that difference is the whole story.

Investigators Confirm A Fist-Sized Charge Of Military Origin

The package attached to the quadcopter held Semtex and PETN, dpa learned Thursday, and reporting by Süddeutsche Zeitung, NDR and WDR describes a fist-sized charge of military origin, which places the material in the supply chains of state services and established armed groups rather than any civilian market. Semtex, developed in Czechoslovakia as a blend of PETN (pentaerythritol tetranitrate) and RDX, has a long record in state-sponsored attacks, including the 1988 bombing of Pan Am Flight 103 over Lockerbie. Trevor Lawrence, an explosives expert at Cranfield University, told The Guardian the charge would be “enough to do considerable damage” to an aircraft, whose skins are often just 3 millimeters (0.12 inches) of aluminium.

Two caveats belong on the record. The 800-gram figure traces to a single regional paper, and no prosecutor has published a laboratory analysis, so treat the exact mass as reported rather than established. If it holds, the charge was roughly double the estimated 340 to 450 grams (12 to 16 ounces) of plastic explosive that brought down Pan Am 103.

Airport security cameras reviewed by investigators show the drone slipping in from the south at 19:28 (7:28 pm) on Tuesday, August 4, and settling in the parking area, according to Süddeutsche Zeitung, NDR and WDR. It sat among the parked Ukrainian cargo aircraft until an airport employee noticed it near the southern runway shortly before midnight. Saxony police confirmed the drone was “carrying an unknown explosive device.” The moment of discovery itself remains muddled: dpa’s security sources say the worker found the drone hovering at low altitude and knocked it out of the air, an account that does not fully square with camera footage showing no second takeoff. Investigators have not reconciled the two.

As DroneXL reported Thursday, federal police used a robot to separate the detonator from the charge, preserving the device for forensics. A DHL freighter that aborted its landing during the closure struck an unknown object about 6 kilometers (3.7 miles) from the field, several hundred meters up, and diverted to Hanover with minor nose damage. Police began searching for debris from that object on Thursday and have not linked it to the drone on the apron.

Leipzig Had Drone Defenses Installed, And The Attacker Engineered Around Them

A specialized drone defense system was in place at Leipzig/Halle, according to dpa, part of a national build-out after a year of incursions, and Dobrindt’s assessment that the drone was modified to bypass protection systems means Germany’s first bomb-carrying drone also beat its first generation of counter-drone protection. Dobrindt broke off his vacation for a late-Wednesday briefing at the airport. He called the incident a “hybrid attack scenario” and said the work did not look amateur, with foreign powers possibly involved. He named no country, and a counterterrorism investigation is underway. Saxony’s prosecutors for politically motivated and extremist crime are leading the case, no suspects have been identified, and Russia has denied involvement in operations of this kind. NATO said it was aware of the incident and referred questions to Berlin.

The target profile needs no decoding. Die Zeit reported the Antonov likely belongs to Ukraine’s air force, and Süddeutsche Zeitung reported the plane was carrying military ammunition, a detail a German official later denied. The airport hosts Antonov’s heavy-lift operation and NATO transport work, and Germany’s Defense Ministry said no Bundeswehr flights were underway at the time.

Germany did not sleepwalk into this. Berlin gave federal police the power to shoot down drones in October 2025 and opened a national drone defense center in Erding this May. Sightings kept climbing anyway: dpa counts 166 unauthorized drones over Germany’s 15 international airports in the first half of 2026. The October law was written for drones in the air. This one crossed the fence at 19:28 and parked. Four hours of dwell time on a secured apron, next to a strategic airlifter, and the sensor that finally worked was an employee’s eyes.

The Same Airport Burned In 2024, And The Suspect List Has Not Changed

Leipzig/Halle is where a DHL parcel hiding an incendiary device ignited in July 2024, shortly before loading onto a flight for Britain, part of a four-parcel plot mailed from Vilnius that European investigators have since tied to the GRU, Russia’s military intelligence service, through 22 identified suspects. The devices used timers hidden in massage pillows. One burned on a courier truck in Poland and another at a DHL warehouse in Birmingham, and Germany’s domestic intelligence chief said only luck kept the Leipzig parcel from igniting mid-air. Eurojust’s joint investigation found the operatives were recruited from people in vulnerable circumstances and paid in cryptocurrency. Their instructions arrived through messaging apps, with each cell knowing little of the full plot. Polish prosecutors call the parcels a dry run for cargo flights to North America. Trials are expected in Vilnius and Warsaw later this year.

The drone pressure ran in parallel. Overnight on September 9, 2025, at least 19 Russian drones, many of them plywood-and-foam Gerbera decoys, crossed into Poland, forcing NATO’s first shots of the war and sending residents of eastern provinces indoors. A month later, reconnaissance drones shut Munich’s airport twice in one week. In July, the International Institute for Strategic Studies tallied 144 drone incidents across 13 European countries between August 2024 and February 2026 and concluded the Kremlin was highly likely behind a coordinated campaign, run partly from ships in its sanctions-evading shadow fleet. None of the drones logged over bases and airports in that campaign was intercepted.

The Guardian’s defense and security editor Dan Sabbagh calls Leipzig the first time a drone with explosives has been found in Europe far from the Ukrainian border, and his read on motive is the bleak one: Moscow, already sanctioned to the hilt, appears to have concluded the West has little left it is willing to punish with. Charlie Edwards, a senior fellow at the institute, told the paper the device was likely “intended to function rather than to be found.”

DroneXL’s Take

For a year I have been sorting Europe’s drone scares into two piles. One pile is phantoms. When we dug into the IISS dataset last month, what jumped out was how many headline incidents collapsed on inspection: Danish police closed a nine-month Copenhagen probe without confirming a single drone, and Belgium’s own broadcaster caught the defense minister passing off a police helicopter as a large drone. The other pile is real. Leipzig is as real as this gets. Nobody misidentifies 800 grams of Semtex.

Here is the inversion that should bother every security minister on the continent. The phantoms closed airports and spawned task forces. The real bomb crossed the fence of a NATO-linked cargo hub at 7:28 in the evening and sat for four hours beside a Ukrainian An-124. A worker on the ramp found it, at an airport with a defense system installed, in a country that armed its police with shoot-down authority ten months ago. Saxony’s interior minister Armin Schuster calls it an “arms race.” He is being polite. An arms race implies both sides are moving.

What will not fix this is another rule aimed at pilots who already follow rules. A GRU quadcopter does not broadcast Remote ID and does not respect a geofence, and grounding hobbyists after every incident hands the saboteur a bonus victory. What has produced results is police work: the parcel plot was unwound into a network of 22 suspects, and the intact detonator now sitting in a Saxony lab is the best lead German investigators have had in two years of this campaign.

Three processes will show where this goes, and each has a date or a docket attached. The parcel trials open in Vilnius and Warsaw later this year, the first courtroom test of the GRU’s disposable-agent model. Saxony’s political-crimes prosecutors own the drone forensics. And Berlin’s promised Air Security Act reform now has to answer for a threat that was already inside the fence, while the EU drone wall we checked in on last week still amounts to a December deadline and a press release. Edwards said the quiet part: this one was built to function. The next detonator may work.

Sources: The Guardian, dpa, TIME, AP, Süddeutsche Zeitung, NDR and WDR via Ukrainska Pravda, BBC, Euronews

DroneXL uses automated tools to support research and source retrieval. All reporting and editorial perspectives are by Haye Kesteloo.