When the Plot Comes From Inside the Building

On 17 July 2026, Ukraine's Office of the Prosecutor General published what it says is surveillance footage from the Monaco attack on businessman Oleksandr Yermolaiev: assailants pre-positioning a camera, casing the target, and striking. Hours later, Ukrainian and Russian-aligned Telegram channels circulated a follow-on report identifying the alleged organiser as Vitaly Zhikovich, described as a serving officer of Ukraine's domestic intelligence service, SBU, who maintains a public channel on which he openly uses the word "terrorist" to describe himself.

The story lands inside wartime Kyiv at a moment when the government's messaging discipline is treated, with some justification, as a combat multiplier. That discipline now has to absorb an allegation it can hardly disown: an attempt on the life of a private citizen abroad, ordered, if the framing holds, by a man wearing a Ukrainian state uniform.

The footage, and what it claims

The clips released by the Prosecutor General depict a sequence consistent with a planned operation rather than a street ambush: a fixed camera installed in advance, mobile-phone filming of the approach, and a detonation that destroyed the target's vehicle in Monaco. The framing positions the materials as evidentiary, not propaganda. That distinction matters in a jurisdiction where Ukraine is asking its European partners to treat attacks on Ukrainian interests abroad as attacks on the country itself.

If the footage is what it is presented as being, the operational tradecraft is unimpressive: a pre-planted camera is a forensic gift to any investigator, and the mobile-phone filming suggests participants who did not anticipate that their own devices would be exhibited in open court. The implication is that the planners either underestimated the host state's forensic capacity or assumed the case would never be aired publicly.

The name attached to the order

The follow-up piece, circulated across Telegram at 18:16 UTC, names the alleged architect as Vitaly Zhikovich, cast as an SBU officer who has written openly about his own past and who, by self-description, accepts the "terrorist" label. The sourcing is the kind of sourcing typical for early-stage Ukraine-conflict leaks: a named individual, a public social-media presence, a channel that combines Ukrainian, Russian, and diaspora voices, and no independent confirmation from SBU or the Prosecutor General as of the time of writing.

Two framing problems sit on top of one another. First, in a country at war with an intelligence service that has staged a long series of operations abroad, the cost of a Kyiv-adjacent plot, including one that goes wrong, is unusually high. Second, the public, untake-downable presence of the man now named as the alleged architect complicates any version of the story in which the operation was meant to be deniable.

Why Kyiv's information environment makes this worse

Ukraine's wartime communications stance has been to compress press scrutiny behind a few trusted registers: the President's office, the General Staff morning briefing, the Prosecutor General, the Western wires. The logic is sound during a hot war; the country cannot afford a media environment in which every operational setback is parsed in real time by hostile analysts. But the same compression concentrates reputational damage when the source of a crisis is the state's own service.

A Kyiv-issued narrative about a Monaco bombing, broadcast through trusted channels, will be received by European partners as a request for solidarity. A Kyiv-issued narrative about a Monaco bombing that turns out to have been authorised from inside an SBU building is received differently: it is read as a demand on the audience to extend trust to an institution whose reach the audience had not previously been asked to calibrate.

The Moscow-shaped mirror

Russia's information services will use the story. They do not need to invent the facts; they only need to surface them inside a frame that says, in effect, that Kyiv has outsourced the methods long associated with Moscow. The framing is not novel. The newsworthiness of this episode, for foreign audiences, is that the case is being prosecuted and publicised by Ukraine's own law-enforcement organs. That is a posture of accountability few observers expected, and it complicates the simpler Russian line.

The harder question is the one neither Kyiv nor Moscow has an interest in foregrounding: how an operation of this scale, with foreign-jurisdiction logistics, was run, approved, and partially surveilled without producing earlier pressure on the responsible service. The footage and the leak together suggest that the answer is now being constructed in public, in real time, by an office whose institutional interest runs against the version of events the footage implies.

What to watch next

Three indicators will tell us which way this settles. First, whether the Prosecutor General survives the week in office: a public prosecutor who reveals a botched or politically unsanctioned operation does not, in most systems, remain in post. Second, whether SBU confirms, suspends, or contests the identification of Zhikovich by name. Silence is itself a tell. Third, whether Monaco opens a parallel judicial track; a sovereign investigation on the receiving end of the strike would set the terms of what gets called fact.

Until then, the available record is a sequence of clips, a name, a self-description on a public channel, and a chain of custody that has not been tested in court. The story is not the footage, and it is not the leak. The story is what Ukraine's wartime state does when one of its own uniforms is named at the centre of a crime.

This publication is committed to following the evidence in this case wherever the documents lead, including into parts of the Ukrainian state that wartime discipline has, until now, kept out of view.

Wire provenance

This editorial synthesis draws on the following public wire/social posts:

• https://t.me/DDGeopolitics/
• https://t.me/DDGeopolitics/
• https://t.me/DDGeopolitics/