The Invisible Supply Chain: How Consumer Technology Became the Engine of Modern Proxy War
There is a company headquartered in Shenzhen that never wanted to be in the arms business. Da-Jiang Innovations — better known as DJI — built its empire selling camera drones to hobbyists and filmmakers. By 2022, its Mavic series had become the bestselling consumer drone on earth. It had also, without quite intending to, become one of the most consequential weapons platforms of the 21st century.
When Russia launched its full-scale invasion of Ukraine in February 2022, both sides immediately pressed civilian drones into military service. Ukrainian forces used DJI Mavics to track and monitor Russian armored convoys. Russian soldiers used the same devices for surveillance and targeting. The same drone that a wedding photographer might rent for a weekend shoot was, simultaneously, identifying artillery positions in the Donbas.
This is the defining feature of how proxy conflicts — and modern warfare more broadly — are now being fought and sustained: not through monolithic state-to-state arms transfers alone, but through the exploitation of a global civilian technology ecosystem that no arms embargo was designed to regulate and no export control framework anticipated. The weapons are increasingly assembled from off-the-shelf components. The intelligence is increasingly purchased on subscription. The communications networks are leased from private companies with quarterly earnings calls. The line between civilian and military technology has not merely blurred. It has, in critical respects, dissolved.
The Drone as the Defining Instrument
The transformation was not invisible — it just happened faster than the institutions watching it could respond. By 2023, according to reporting from NPR and multiple Ukrainian military sources, Ukrainian forces had acquired and modified large numbers of Chinese DJI commercial drones in a purchasing process that the country's own officials described as chaotic, opportunistic, and urgent. Former Ukrainian Prime Minister Denys Shmyhal said at one point that Ukraine hoped to procure up to 60 percent of global DJI Mavic production.
The economics made the logic inescapable. A military-grade reconnaissance drone might cost tens of thousands of dollars; a DJI Mavic could be ordered online for under a thousand. At scale, that asymmetry is decisive. Ukrainian soldiers modified commercial quadcopters to carry and drop grenades on Russian positions. FPV (first-person view) drones — originally a motorsport hobby — were repurposed as low-cost kamikaze weapons, guided by pilots wearing video goggles into tanks and armored vehicles. By 2024, drones had caused more casualties in Ukraine than any other single weapon type, according to reporting from research firms tracking the conflict.
Russia followed the same logic. And here the supply chain entanglement became genuinely uncomfortable for the companies involved. DJI's proprietary AeroScope system — a drone-detection platform designed to help regulators and airports track unauthorized UAVs — was allegedly used by Russian forces to identify the location of Ukrainian drone pilots, turning a civilian safety product into a targeting tool. Ukraine's Minister of Digital Transformation sent an open letter to DJI's founder accusing Russia of using an extended version of AeroScope to navigate missiles into Ukrainian civilian areas. DJI denied the accusations, and in April 2022 temporarily suspended all sales to both Russia and Ukraine.
The suspension was largely symbolic. The drones were already in country. And the components that made them work were available through an archipelago of third-party suppliers that no single company controls.
Components Don't Carry Flags
What makes the new arms supply chain structurally resistant to conventional interdiction is its modularity. Weapons are no longer exported as finished systems. They arrive as components, firmware updates, and design files — assembled close to the front lines, or in warehouses in countries that maintain plausible distance from the conflict.
This dynamic is most visible in the case of Iran's Shahed-136, the loitering munition that Russia has used extensively against Ukrainian infrastructure since 2022 and that has spread through the Iranian proxy network to the Houthis in Yemen, Hezbollah in Lebanon, and militias in Iraq. The Shahed is often described as a low-cost weapon — effective precisely because of its cheapness and expendability. But analysis of recovered systems has consistently found the drone's internals stuffed with Western-origin electronics: microcontrollers, processors, and communications components sourced from manufacturers in the United States, Europe, and East Asia.
At least 31 foreign electronic components have been identified inside the Shahed-107 variant alone, according to analysis by Ukraine's UNITED24 Media. These components do not enter Iran directly; they are routed through front companies, free-trade zones, and intermediary states — the United Arab Emirates, Hong Kong, and China among them — that serve as transshipment hubs. The European Union estimated in 2024 that up to 70 percent of the high-tech products reaching the Russian military were arriving from China. The US Treasury Department sanctioned China-based front companies specifically for procuring drone components on behalf of Iran's state-owned drone manufacturer HESA, whose products appear in conflicts from Ukraine to Yemen to Sudan.
The Houthi drone program illustrates the model at its most elaborate. Intercepted weapons shipments in the Red Sea have revealed that Houthi drones are assembled in Yemen from components sourced across at least 16 different countries, with only a small fraction of parts directly traceable to Iran. The weapons arrive not as finished munitions but as what investigators have described as coded DIY kits — designed for local assembly, with plausible deniability baked into the logistics. The Houthis have conducted at least 388 drone attacks between 2018 and 2024, targeting Saudi Arabia, the UAE, Israel, US Navy vessels, and international commercial shipping in the Red Sea, according to data compiled by the Orion Policy Institute.
The Satellite Layer
If drones represent the kinetic layer of the new supply chain, commercial satellite data represents its cognitive layer — and the transformation here is, if anything, even more significant.
For most of the 20th century, satellite imagery was the exclusive province of superpowers. The resolution and timeliness required for battlefield intelligence demands that made the technology inherently dual-use were tightly controlled, accessible only to governments with the budgets and bureaucracies to operate national reconnaissance programs. That world is gone.
Ukraine entered the 2022 war with a satellite intelligence deficit that it rapidly closed through the commercial market. Companies like Maxar Technologies and Planet Labs provided near-real-time imagery of Russian troop positions, convoy movements, and damage assessments to both the Ukrainian military and — critically — to journalists and open-source analysts whose public reporting placed independent pressure on Russian operations. In October 2024, Rheinmetall partnered with Finnish SAR satellite company ICEYE, with German government funding, to provide Ukraine with synthetic aperture radar imagery capable of producing high-resolution reconnaissance regardless of cloud cover or time of day. SAR satellites, as Rheinmetall noted, make even small objects on the earth's surface identifiable.
By 2025, Ukraine had developed a satellite strategy that the country's own defense ministry described as a 2030 roadmap: deploying domestic reconnaissance satellites, negotiating access to the EU's Copernicus constellation, and entering agreements with commercial operators in Japan and elsewhere. When the United States temporarily suspended the provision of US government-purchased commercial satellite imagery to Ukraine in March 2025 — as part of a broader pause in intelligence support — Ukraine had already diversified enough that the blow was painful but not fatal. The suspension was, in itself, a demonstration of how structurally dependent conflict parties had become on the commercial sector: it was not a military satellite program that Washington switched off, but a subscription service.
The same dynamic operates on the other side. US officials warned allies in April 2024 that China had been providing satellite imagery to Russia specifically for military purposes, including, according to Ukrainian President Volodymyr Zelensky, imagery of Ukrainian nuclear power stations. Chinese companies have supplied commercial-grade space data to Russian forces in ways that mirror the DJI dynamic: technology built and marketed for civilian applications, absorbed into military intelligence pipelines without any single transaction constituting an obvious arms transfer.
Starlink and the Problem of Infrastructure
No technology illustrated the civilian-military entanglement more starkly — or more uncomfortably — than Starlink. When SpaceX activated its satellite internet service in Ukraine days after the Russian invasion in February 2022, it was widely celebrated as an act of solidarity: low-earth-orbit broadband keeping Ukrainian communications alive as Russia targeted terrestrial infrastructure. Within months, Starlink terminals had become standard equipment for Ukrainian military units, enabling battlefield communications, drone operations, and command coordination that would otherwise have been impossible.
The complications arrived quickly. SpaceX founder Elon Musk announced in February 2023 that the company would no longer make Starlink available for Ukrainian offensive operations, a decision that reportedly disrupted a planned naval drone attack on Russian ships in Crimea. The Pentagon, recognizing its exposure, began working with SpaceX and Ukraine to prevent Russian forces from exploiting Starlink terminals acquired through black-market channels — a problem the assistant secretary of defense for space policy described in 2024 as something the US military simply had to "bake in and understand" given that Starlink was a commercial product available on the open market.
Russia used Starlink terminals, smuggled through intermediaries, to guide its own drones in Ukraine. Russia also attempted to jam Starlink signals using its Tobol ground-based system, originally designed to protect Russian satellites from interference — repurposed to disrupt a commercial broadband constellation. By 2025, a SpaceX internal briefing leaked to The Wall Street Journal warned that aggressive termination of US government users of Starlink could expose the company to regulatory retaliation, a document that crystallized the bind that private infrastructure companies now occupy: too embedded in conflict to step back, too commercially vulnerable to step fully forward.
In May 2026, Musk publicly accused the US military of using Starlink to guide suicide drones in Ukraine without SpaceX authorization, framing it as a violation of the company's terms of service — a claim that encapsulated, with some irony, exactly what the commercialization of military infrastructure produces: private companies setting the rules of engagement for sovereign military operations.
The Export Control Lag
Governments have not been passive in the face of these developments, but they have consistently been slower than the technology. The United States has built one of the most comprehensive drone-restriction frameworks in the world, banning federal agencies from operating Chinese-made UAS, designating DJI as a Chinese military company, adding it to the Treasury's CMIC list, and passing the American Security Drone Act of 2024, which prohibits federal purchases of drones from designated adversarial nations.
These measures have genuine bite inside the US government procurement system. They have little effect on the gray-market flows that route commercial components through free-trade zones and front companies into conflict zones. Lithuania banned Chinese drones outright in 2024. Alongside Poland and Canada, it is part of a coalition moving toward stricter supply-chain compliance — toward what is described in the US context as a "Blue List" of drones certified free of Chinese components under the National Defense Authorization Act's Section 848. But manufacturers have struggled to source compliant alternatives for certain component categories, and the so-called "red-free drone" remains an aspiration more than a reality at scale.
The European Union, for its part, has called for robust export controls on autonomous weapon technologies, urging that European-made drone technology not contribute to human rights abuses or destabilization. The EU's sanctions envoy in late 2024 said the flow of high-tech products from China to Russia through third countries was, with clinical directness, "killing Ukrainians."
The structural problem is this: the technologies in question were not designed as weapons. They emerged from consumer electronics supply chains optimized for global scale, cost reduction, and interoperability. Retrofitting arms-control logic onto that architecture is not impossible, but it requires a degree of coordination between governments, manufacturers, and platform operators that has not yet materialized — and that the competitive dynamics of global technology development actively work against.
What the New Supply Chain Reveals
The evolution of arms supply chains in proxy conflicts is not primarily a story about technology. It is a story about power and legibility — about who can be held accountable for the consequences of systems that were never designed to be weapons and that no single actor controls end-to-end.
DJI did not choose to be a weapons supplier. Maxar did not design its satellites as targeting systems. SpaceX did not build Starlink to guide drone strikes. Each of these companies has articulated genuine discomfort with the military applications of their products. Each has also, in various ways, found that discomfort difficult to operationalize — because the technology is too useful, the customers too powerful, and the legal and contractual frameworks governing their obligations too underdeveloped to provide clear guidance.
What has emerged is a system in which the most consequential arms supply chains in contemporary conflict are not routed through defense ministries but through venture-backed technology companies, commercial satellite operators, and consumer electronics distributors. Sanctions regimes built around state-to-state arms transfers struggle to address it. Export controls built around specific weapons categories miss it. And the actors most capable of disrupting it — the technology companies themselves — lack both the authority and, in most cases, the incentive to do so unilaterally.
The Houthi drone that struck near the US Embassy branch office in Tel Aviv in 2024 — assembled in Yemen from components sourced across sixteen countries, guided by satellite navigation, bearing the DNA of sanctions-evading supply chains that stretched from Tehran to Shenzhen to Dubai — was not an anomaly. It was a product. And the supply chain that built it is still open for business.
