Constanta Blast Exposes Radar Gap

Berth 78, Constanta port. A maritime drone hit the quay wall and exploded. There were no casualties, no proven attacker, and no Romanian authority publicly identified as the body responsible for detecting a military-grade weapon drifting into a civilian harbour.

For Malta, this is not a distant Black Sea incident. We are an island economy built around ports, shipping, insurance, bunkering and logistics. If a civilian harbour can be used for wartime cargo, grain exports and allied planning, the line between commercial infrastructure and security infrastructure becomes thin very quickly. Constanta shows what happens when that line is treated as someone else's problem.

Constanta matters beyond Romania. The port moves Ukrainian grain through the EU's Solidarity Lanes, sits on the revised Trans-European Transport Network, the EU's priority infrastructure map, and is increasingly viewed by regional experts as a possible Black Sea logistics hub for NATO (AGERPRES). A sustained disruption there would not stay in Romania. It would affect Danube shipping, grain exports, Black Sea insurance pricing and allied military planning.

Two Surveillance Systems, Both Blind to What Arrived

Romania's interim defence minister Radu Miruță stated the problem bluntly: the Romanian army does not guard Constanta port in peacetime (European Pravda, WP). Other state bodies carry that responsibility. The port, he said, should have detection systems of its own.

Constanta was being watched from the air and from the sea, but not in a way that could see the weapon that arrived. An existing anti-drone system intercepted an aerial drone in May. Romania's coastal surveillance network tracks vessels above roughly six metres. A Magura V5 maritime drone measures 5.5 metres. It falls just below the threshold. Two surveillance systems were in place, and both missed the actual threat.

The response after the blast showed the institutional fragmentation. Civilian maritime authorities spotted the object and alerted the navy. The navy notified the coast guard and SRI, Romania's domestic intelligence service. Ukraine sent a warning shortly before the drone self-detonated. Romania's coast guard began testing an autonomous maritime-drone detection system only afterwards (Digi24). Miruță also confirmed that five more drone remains had been destroyed at sea, some of them containing explosive material (Adevărul, Antena 3).

Spillover, Not a Strike

The public evidence does not show a deliberate attack on a NATO port. Romanian and Ukrainian sources point instead to a Ukrainian maritime drone that lost control, probably after Russian electronic warfare interfered with it (BTA, Antena 3). President Nicușor Dan placed responsibility on Moscow through that electronic-warfare chain, not through a proven order to strike Constanta (Moldova1). Bucharest and Kyiv are now negotiating a protocol on warning thresholds and self-destruction programming before drones enter Romanian waters.

That distinction makes the problem harder, not easier. A deliberate attack would bring clearer military and alliance responses. War spillover caused by electronic warfare and uncontrolled weapons sits in a grey zone. It is too dangerous for ordinary port procedures, but too ambiguous for automatic military command.

Malta should recognise that grey zone. The Grand Harbour and the Freeport are civilian infrastructure, but they are also part of European trade, energy and maritime security. A small island does not need a Black Sea war on its doorstep to understand how quickly a port incident becomes a national one.

Who Watches the Water

The EU already has the legal tools. The CER Directive, the EU law requiring critical entities to assess risks and build resilience, covers transport infrastructure. NIS2, its companion law on cybersecurity and governance for essential services, covers port managing bodies and vessel-traffic services (EUR-Lex, European Commission). Commission guidance issued days ago treats physical, digital and hybrid disruption as one policy field.

But those frameworks do not answer the operational question exposed at Constanta: which Romanian actor sees a small maritime drone first, classifies it, and has the legal authority to neutralise it before it reaches a berth?

Part of the gap is national. CER identification and supervision are left to member states, and Romania's implementation may simply be late. Yet the same question now applies to every eastern-flank port carrying wartime logistics: Varna, Burgas, Alexandroupoli, Klaipėda and Gdańsk. Bulgaria has already expanded its joint mine-countermeasure mission with Romania and Turkey to include surveillance of undersea infrastructure (BNR, AGERPRES). Lithuania has gone further in airspace, giving airport operators individual responsibility for drone-risk assessment and contingency procedures (LRT). Ports have no equivalent duty.

Europe has given civilian hubs wartime work. It has not yet matched that with wartime-level detection. Miruță, and every defence minister on the eastern flank, now owes the public a specific answer: who is watching the water?