Two drones, two directions — what we are missing in the Galați–Constanța equation, and why the oil at Constanța changes the stakes

In ten days, Romania was struck by two fundamentally different drones, coming from opposite directions and belonging to the two different belligerents. The public framing — “Russian drones” — hides exactly what matters strategically: a second vector has opened, a maritime one, right next to the country's most sensitive energy infrastructure. That is what we are missing.

1. The two incidents are not the same thing

Galați — the night of 28–29 May 2026. A Russian Geran-2 drone (the Russian variant of the Iranian Shahed-136, around 50 kg of explosive, range 1,000–1,500 km) hit the roof of a 10-storey apartment block in the city centre. Two people injured, around 70 evacuated. The drone was part of a swarm of 43 aircraft attacking the Ukrainian ports on the Danube; it was hit above the town of Reni (Ukraine), changed trajectory and spent roughly 4 minutes in Romanian airspace before impact. It was the 28th violation of Romanian airspace since Russia began attacking the Ukrainian Danube ports. President Nicușor Dan called it “the most serious incident since the start of the invasion.”

Constanța — 5 June 2026, around 10:30. A naval drone (an uncrewed surface vessel, USV — the type Ukraine uses against Russia's Black Sea Fleet) was spotted in the port in the morning and self-detonated a few hundred metres from the headquarters of the Maritime Rescue Agency and a few hundred metres from an oil terminal. No casualties. The Ukrainian Navy admitted it had lost control of the craft due to electronic jamming, and the drone drifted toward the Romanian coast.

This is the first distinction the public conversation misses:

Criterion	Galați	Constanța
Type	Aerial kamikaze drone (Geran-2)	Naval surface drone (USV)
Owner	Russia	Ukraine (lost to jamming)
Mechanism	Deflected in combat / partly shot down	Drift after electronic warfare
Vector	Aerial, from the north (Danube)	Maritime, from the east (Black Sea)

2. What we are actually missing

2.1 The threat is bidirectional

Galați is a leak from Russian systems. Constanța is a leak from Ukrainian systems, probably pushed off course by Russian electronic warfare. European officials have also floated the hypothesis that Ukrainian naval drones use automated targeting systems for Russian energy infrastructure — which means that, when they stray, they can “seek out” oil-terminal-type signatures even on NATO territory. Ukraine, in turn, accuses Moscow of deliberately diverting drones into NATO countries to drive a wedge between Kyiv and its allies. Whichever hypothesis is correct, the operational conclusion is the same: Romania must defend against the errors and the manipulation of both sides at once, not merely against “Russian aggression.”

2.2 The maritime flank has opened

The 28 previous incidents were aerial. The Constanța incident is qualitatively new: a USV reached a major NATO commercial port, next to critical infrastructure. The entire defence architecture we are building — radars, F-16 jets, the SKYNEX and SKYRANGER systems from the SAFE programme — looks upward. The seaward approach to the oil terminal is the soft underbelly: less monitored, less defended.

2.3 The capability gap is NOW, not in the future

Through SAFE, Romania has contracted around €16.68 billion — 11 air-defence systems (7 SKYNEX, 2 SKYRANGER, 2 naval Millennium, from Rheinmetall, roughly €982 million), 34 drone systems (Quantum Systems, €30.7 million), 231 Mistral man-portable systems. None of them is operational yet. The Galați drone was not shot down because the shield is on paper, not in position. Between the signing of the contract and the battery on the ground lies a window of vulnerability that the adversary reads perfectly.

2.4 The attribution confusion is itself a vulnerability

At Galați, three contradictory hypotheses circulated — deflected, deliberate, and “Russia's responsibility regardless of trajectory” — coming from different official sources. The lack of a single communication doctrine in the first hours is exactly the space in which information warfare operates. An adversary does not need to hit you if it can make you contradict yourself live on air.

3. What this escalated from, now

The escalation is not random — it is a geographic convergence of two campaigns that intensified in parallel, right on Romania's border:

• On the Danube: Russia stepped up strikes on the Ukrainian ports of Izmail and Reni (attacks on 2 and 19 May 2026, with grain silos and elevators damaged). After the collapse of the Black Sea grain deal (July 2023), the Danube became Ukraine's vital export artery — and these ports are a few hundred metres from the Romanian bank. More drones over the Danube means more inevitable spillover.
• At sea: Ukraine has pushed naval-drone operations ever deeper into the western Black Sea, and Russian jamming diverts them — some end up on the Romanian coast.

In other words: the “Danube plus western Black Sea” front has come to overlap Romania's border and ports. We did not escalate — the theatre of operations moved over us.

4. The oil at Constanța — what we verified and why it matters

Oil Terminal SA (Port of Constanța, founded in 1898, state-controlled through the Ministry of Energy, listed on the Bucharest Stock Exchange — ticker OIL) is Romania's largest terminal for crude oil and petroleum products. The actual flow: tankers discharge the crude, which is handed over to Conpet (the trunk-pipeline operator) and pumped to the refineries. The 2026 contracts total around 130 million lei — about 60 million with OMV Petrom (crude discharge plus handling of petrol, diesel, fuel oil) and about 70 million with Oscar Downstream.

The key point most coverage misses: the crude flowing through the terminal is not Russian — the Petrotel refinery stopped Russian crude in December 2022, and imports are non-Russian (there was even an episode of contaminated Azeri crude, stopped before it reached the refinery). But the infrastructure is caught in the sanctions net:

• Petrotel Lukoil (the Ploiești refinery, owned by the Russian giant Lukoil) is shut down because of US sanctions on Lukoil's international assets. The US has extended a waiver until 29 October; Romania wants to restart it.
• The Petrotel blockage hits Constanța directly: the refinery accounted for around 22% of Oil Terminal's revenue, and the company estimates a 27.2% drop in physical activity in 2026 — around 2.5 million tonnes of crude not transported (about 65 million lei) plus around 450,000 tonnes less petrol. At Conpet, revenue from transporting imported crude falls by more than two-thirds (from 164.42 to 109.24 million lei). The two state companies together estimate losses of over 100 million lei if the refinery stays closed all year; Oil Terminal's 2026 revenue is projected at around 370 million lei, down about 9%.

The energy-vulnerability synthesis: Constanța is at once the strategic energy terminal of NATO's eastern flank, a node economically weakened by the Petrotel/Lukoil blockage and sanctions, and now physically inside the threat zone of drifting naval drones. A drone — stray or targeted — that hit the tanks or the petroleum quay would trigger a security crisis and a supply crisis at the same time, at a moment when refining capacity is already under strain. The fact that the USV on 5 June came to rest a few hundred metres from the terminal is not a fait-divers detail; it is an involuntary demonstration that nothing stops the next drone from not stopping there.

5. What comes next — a psychohistory reading

An olivLaw panel of 12 virtual personas (decision-makers, military officers, energy specialists, journalists) converges on three probabilistic conclusions:

1. The maritime incidents will recur (high probability). As long as Russian jamming and Ukrainian naval drones coexist in the western Black Sea, drift toward Constanța is statistically inevitable. The North Atlantic Council meeting of 10 June, requested by Romania, is the test: if it produces maritime and coastal defence at Constanța, not just statements, then NATO has understood the vector; if it produces only condemnations, it has not.
2. The window of vulnerability lasts until the SAFE systems become operational — a matter of months, not days. This is the geopolitical bluff: the adversary is betting we will shoot nothing down in this interval, because for now we have nothing to do it with.
3. Energy becomes the target-as-message. Proximity to the oil terminal turns every incident from an accident into a signal: “your energy infrastructure is within reach.” The correct response is not only military but also energy redundancy — a controlled restart of refining capacity, stockpiles, alternative routes.

The analytical recommendation: shift the centre of gravity of defence from “airspace” to “the maritime approaches to Constanța plus the energy infrastructure.” That is where the gap is. That is what we are missing.

Methodology and sources

The analysis draws on international and Romanian press reporting from 28 May – 5 June 2026 on the aerial incident at Galați (a Geran-2 drone) and the naval incident at Constanța (a Ukrainian surface drone that drifted under jamming), on public data from Oil Terminal SA and Conpet regarding 2026 contracts and activity, on the context of the US sanctions on Lukoil and the Petrotel refinery, on the timeline of Russian strikes against the Danube ports of Izmail and Reni, and on the list of defence procurements contracted through the SAFE programme. The estimates regarding the probability of recurrence and the window of vulnerability are analytical assessments, not certainties; the financial and military figures are taken from company and government reporting, with their attendant margins of uncertainty. The text does not reproduce classified operational data.