Vladimir Putin Is the Moth Eating NATO’s Article 5

A clothes moth never eats a coat herself. She cannot: the adult’s mouthparts are vestigial.

Instead, she finds the dark at the back of a wardrobe, works into a seam, and glues a few dozen eggs to the wool. Her hungry larvae then do the eating, grazing where nobody looks until it’s too late. The holes are there, the damage done.

On Tuesday, Germany’s government concluded that Russia was responsible for the attempted August 4 attack at Leipzig/Halle Airport, where an explosives-laden drone was found beside a Ukrainian cargo plane and defused. Interior Minister Alexander Dobrindt said intelligence pointed to people acting “on behalf of Russian state entities,” without specifying which.

Read More on Analysis

Berlin summoned Moscow’s ambassador, moved to close a Russian consulate and cultural center, and will seek further European Union sanctions. Moscow’s ambassador dismissed the accusations as absurd and warned of retaliation.

Nobody has accused Russian President Vladimir Putin of flying that drone. Remember: the mother moth does not eat the coat.

But through that process, Putin, the Russian mother moth, appears to be thinning the fabric of NATO’s Article 5.

His larvae, Russian special operations units putting their proxies to work across the European continent, are busy in the shadows, gnawing holes in the NATO alliance’s commitment to collective defense.

The conventional fear is that Putin will one day tear NATO’s fabric with an unmistakable attack, forcing 32 allies to prove Article 5 means what it says. This is the kind of traditional attack Article 5 was designed to deter.

But we are in a whole new era today, well beyond the almost quaint certainties of the Cold War. Now, we are grappling with the stark grayness of hybrid warfare.

Leipzig is a case in point. Article 5’s legal force is not being rewritten by alleged Russian attacks like these. What is exposed is its deterrent certainty, an assumption that hostile action against one ally reliably summons the others.

NATO’s own texts say significant cyber and other hybrid attacks may amount to an “armed attack,” judged case by case. Its counter-hybrid policy puts primary responsibility for responding on the targeted country.

At Vilnius in 2023, allies agreed that individual members may consider attributing hybrid activity and responding in coordination, “recognising attribution is a sovereign national prerogative.”

The record bears that out. In November 2025, an explosive charge detonated under a freight train on the Warsaw–Lublin line, the route carrying Western supplies into Ukraine.

Polish Prime Minister Donald Tusk called it “an unprecedented act of sabotage,” and Polish authorities blamed two Ukrainian nationals recruited by Russian intelligence, both of whom reached Belarus.

Leipzig has a precedent, too. In 2024, Western authorities accused Russian military intelligence of planting incendiary devices in air cargo, and parcels sent from Lithuania caught fire at handling depots in Germany and Britain.

In July, Romania shot down drones in its airspace, summoned Moscow’s ambassador and expelled a diplomat. One tally counts at least 151 reported Russian operations in Europe since the invasion, a campaign the EU’s top diplomat Kaja Kallas has called “state-sponsored terrorism.”

Each incident is assessed alone, attributed alone, and mostly answered alone. That is a loophole Moscow is nibbling around the edges of.

U.S. President Donald Trump, who has in recent months questioned NATO’s commitment to collective defense in a fit of anger over allies’ reluctance to join him in attacking Iran, has made this category problem vivid. On August 27, when asked whether Putin had agreed not to attack the alliance, he said: “He’s not going to be attacking a NATO territory.”

That seeming reassurance was two days after CIA Director John Ratcliffe’s surprise Moscow trip, reported to have carried a U.S. warning against testing NATO’s resolve. Five days later, Berlin accused Russia of a hybrid attack on German soil.

It reads instinctively as a contradiction, but it is more of a problem in definition.

Trump’s assurance assumes we know what an attack on NATO looks like these days. He is, in many ways, a product of the Cold War era, so he may see an attack in more traditional terms, like armor, airspace, a front.

But Leipzig was a drone on a cargo apron. So where does that fit within Article 5? Does it count?

It is an unresolved tension. Germany could risk calling to trigger Article 5 over Leipzig, but it remains an open question whether everyone in the alliance would rally to its defense. Most important: Does Trump view Leipzig as an Article 5 issue?

Any sign that NATO allies were anything other than fully committed to each other’s defense would risk destroying the institution that has underpinned European security for decades.

Of course, Article 5 was never built to answer every hostile act with force. A high threshold may preserve its credibility rather than corrode it, even if things get messy below it. NATO has deliberately built a tier below collective defense—resilience objectives, Counter Hybrid Support Teams, and national countermeasures—so Moscow cannot force a choice between war and nothing.

Mark Rutte, the alliance’s secretary-general, made that case after the latest incident, calling the evidence clear, welcoming Germany’s measures, and pledging that NATO would keep strengthening its ability to deter “malign actions like those seen in Leipzig.”

In August, the North Atlantic Council condemned Russia collectively over drone incidents and airspace violations in Poland and Romania. Absorption is not acquiescence.

Article 4, which lets any ally demand urgent consultations, was invoked twice in 10 days last September. First by Poland after Russian drones crossed its border, then by Estonia after three MiG-31s spent 12 minutes in its airspace.

But that mechanism has been used nine times in 77 years, and the pattern of what does not trigger it is instructive.

After November’s railway attack in Poland, no consultations followed. None followed the Baltic undersea cable cuts. None, so far, has followed Leipzig.

Consultation appears to follow the machinery—the stray aircraft—not the saboteur. What summons the alliance collectively is a Russian machine crossing a border in plain sight, the kind of identifiable visibility hybrid operations are built to avoid.

If Rutte is right, the emerging pattern of response should, over time, produce tightening cohesion within NATO. Things like faster attribution, more collective answers, and allies routinely invoking Article 4 consultations over sabotage instead of handling it alone.

But if Putin the moth is right, each incident will be condemned, each response national, each threshold quietly reset a little higher. Each attack another new hole in the fabric of Article 5 until, eventually, there’s nothing left at all.

Article 5 was written to stop a catastrophic tear in NATO’s fabric. Putin’s Russia, however, may have found that a moth never needs to tear anything at all.