An explosives find near a gas pipeline in Serbia days before Hungary’s election briefly appeared to hand Viktor Orbán a political lifeline. Within 24 hours, Serbia’s own military intelligence had dismantled the narrative he was building around it.
On April 5, two backpacks containing roughly four kilograms of plastic explosives, detonator caps, detonating cord, and assembly tools were found near the village of Velebit in northern Serbia’s Kanjiza district, a few hundred metres from the TurkStream pipeline that carries Russian gas through the Balkans to Hungary. The discovery came six days before Hungary’s parliamentary elections, at a moment when Orbán’s Fidesz party was trailing the opposition Tisza party in every independent poll.
What followed was a rapid sequence of political escalation, a carefully staged border visit, a chorus of accusations against Ukraine — and then a public rebuttal from the country that had supposedly uncovered the threat.
The Escalation
Serbian President Aleksandar Vučić, a close political ally of Orbán, informed the Hungarian prime minister by phone on the morning of April 5. Orbán convened an emergency session of Hungary’s National Defence Council the same day. Speaking to Reuters after the meeting, Orbán stopped short of directly naming Ukraine but made his implication clear: “Ukraine has been for years trying to cut Europe off from Russian energy,” he said, adding that attacks on the Russian section of TurkStream represented “a mortal danger for Hungary.”
His office moved faster. Balázs Orbán, a senior official in the prime minister’s office, posted on social media: “Just a series of coincidences” — before listing the pipeline incident, the closure of the Druzhba oil pipeline, and the 2022 Nord Stream attack, which the Hungarian government has repeatedly blamed on Ukraine. “Ukraine wants to force Hungary to abandon its pro-peace position and support the war,” he wrote, as reported by CNN.
Foreign Minister Péter Szijjártó went further, suggesting the incident “fits into the pattern” of previous Ukrainian actions against Russian energy infrastructure and directly comparing it to Nord Stream. Moscow, predictably, aligned. Kremlin spokesperson Dmitry Peskov told reporters it was “highly likely” that Kyiv was involved, while Russian Foreign Ministry spokesperson Maria Zakharova used the incident to deliver a broader attack on Ukraine’s conduct, according to Euronews.
The Visit
On April 6, Orbán travelled personally to the TurkStream pipeline on the Hungarian-Serbian border, as documented by Balkan Insight. “Yesterday they wanted to blow up the gas pipeline,” he wrote on Facebook before departing. “We are checking whether everything is in order on the Hungarian side.” Standing before cameras at the border, he called TurkStream a “lifeline” for Hungary, praised Serbia’s response, and warned that if the pipeline were cut, “hundreds of thousands of Hungarian families will be left without gas.”
Asked whether the timing of the incident — one week before the vote — had anything to do with the election, Orbán dismissed the question. “This event does not affect the elections,” he said. “It affects Hungary’s energy security. Let us not mix the campaign with governing the state.”
The images from the border visit were striking: a wartime-style inspection of military protection, the prime minister in the field, the threat made visible. It was, as Kyiv Post noted, a campaign moment framed as a security moment.
The Warnings That Came First
What gave the incident its most suspicious quality was not what happened after it — but what had been predicted before it.
Hungarian opposition leader Péter Magyar said on April 5 that his party had received prior warnings from multiple sources that “something might ‘accidentally’ happen in Serbia, possibly involving a gas pipeline, around Easter, one week before the Hungarian elections. And so it happened,” he wrote. “If Viktor Orbán and his propaganda machine use this provocation for campaign purposes, it will amount to an open admission that it was a pre-planned false-flag operation.”
Magyar was not alone. Hungarian security expert András Rácz had posted on Facebook on April 2 — three days before the discovery — warning of the possibility of a staged attack on TurkStream in Serbia and predicting that any explosives found would be identified as Ukrainian in origin, according to reporting compiled by CNN. Former senior Hungarian counter-intelligence officer Péter Buda told the BBC that credible prior information about such an operation had existed, including details about its potential location and timing.
Political analyst Mujtaba Rahman of the Eurasia Group described the incident as a “seemingly convenient threat” for Orbán, given the timing.
Serbia’s Rebuttal
The narrative collapsed from an unexpected direction. On April 6, Djuro Jovanić, director of Serbia’s Military Security Agency (VBA), addressed the public directly — and systematically dismantled the Ukrainian interference claim his country’s president had allowed to circulate.
“It is not true that Ukrainians tried to organise this sabotage,” Jovanić said, as reported by RFE/RL. He confirmed that Serbian intelligence had been tracking a suspect for months: a militarily trained individual from a migrant group, whose detention was a matter of when, not if. The investigation was ongoing.
Then came the detail that reframed the entire incident. “The markings on the explosives clearly show that they were manufactured in the United States,” Jovanić said publicly, as cited by Serbian Monitor and confirmed by European Pravda. “Will someone now say that this might suit the United States at this moment?” The Serbian Armed Forces, he added, “do not interfere in political processes in the Republic of Serbia, let alone in those of any other country.”
Jovanić also addressed the disinformation directly: “Speculation has emerged that members of the Serbian army would work for some other or third party by finding Ukrainian explosives and accusing Ukraine of organising the sabotage. That is not true. The manufacturer of the explosives does not mean that they are the perpetrator or the client.”
Kyiv’s Response
Ukraine’s Foreign Ministry had rejected the accusations from the moment they surfaced. Spokesperson Heorhii Tykhyi wrote on X on April 5: “We categorically reject attempts to falsely link Ukraine to the incident involving explosives found near the TurkStream gas pipeline in Serbia. Ukraine has nothing to do with this.” He added: “Most probably, a Russian false-flag operation as part of Moscow’s strong interference in Hungarian elections.”
The statement pointed directly to what Kyiv — and a number of Western analysts — assessed as the incident’s actual function: not a genuine security threat attributed to Ukraine, but a manufactured pretext to reinforce Orbán’s central campaign message that Ukraine poses an existential danger to Hungary’s energy supply and, by extension, to Hungarian households.
The Broader Context
The pipeline incident did not emerge in a vacuum. It landed inside a months-long escalation of energy-related accusations between Budapest and Kyiv.
Hungary and Slovakia have accused Ukraine of slowwalking repairs to the Druzhba oil pipeline, which has been offline since late January following a Russian drone strike. Kyiv attributes the damage to Russia. Orbán has used the Druzhba dispute to block Hungary’s formal support for a 90-billion-euro EU loan to Ukraine, approved by all other 26 member states in December. The pipeline incident allowed him to collapse these separate disputes into a single narrative: Ukraine as an aggressor against Hungarian energy security, TurkStream as the next target.
The disinformation dimension was noted by Simo Cvijic, an analyst quoted by RFE/RL: “Our authorities do not dare to openly accuse Ukraine, so they invent some supposed migrants instead, conveniently fitting into Orban’s anti-migrant rhetoric.” Cvijic added that the incident reflected “all the core narratives of Russian disinformation being promoted in this part of Europe” and suggested Belgrade’s handling of it pointed to “an intention to help a friend—Orbán—in trouble”, while stopping short of a direct accusation of staging.
The incident also arrived in the same week as US Vice President JD Vance’s visit to Budapest, during which Vance alleged, without evidence, that Ukrainian intelligence services were actively interfering in Hungary’s elections. The convergence of the pipeline narrative and Vance’s claims created a dense pre-election information environment in which Ukraine featured as Hungary’s primary external threat, with Russia conspicuously absent from the frame.
Hungary’s election is on April 12. The suspect in the pipeline case remains unidentified.
