Drone attacks in the Middle East have shown how vulnerable maritime chokepoints truly are. The same risks also exist in Panama, and could materialize without much warning, leaving the Canal exposed to a coercion model that requires no destruction.
We have built a 120-page threat assessment, including defense architecture requirements and proposed system of systems defense. Interested in reading? Reach out at info@dronesense.ai
Key Findings
- The Panama Canal cannot certify its own airspace clear of drones. No publicly confirmed counter-UAS sensor exists at any Panama Canal lock complex. The only radars in the vicinity are civil air traffic control sets not tasked for small unmanned aircraft. A first-person-view drone covers the 0.8 km from the west bank to lock infrastructure in 21 seconds.
- Closure duration is set by certification capacity more than damage repair. Gatwick lost 33 hours and £50 to 70 million to a drone that was never confirmed to exist. Red Sea traffic ran 60 percent below baseline after 100 consecutive attack free days. Recovery tracks demonstrated safety, and demonstrated safety requires an instrument the canal does not have.
- Capability Sits 530 km From Access: Colombian effective drone attacks rose 445 percent in 2025, to 333. Demonstrated non-state reach is approximately 25 km. Panamanian networks moved 1,587 contraband drones through prisons in 2023 alone but hold no canal intent. Darién revenue collapse of 98 percent is inverting the incentive that keeps capability and access apart.
- Motive Is Convergent, Not Absent: Infrastructure extortion is a four-decade Colombian illicit-business line. Prediction markets settle on reported disruption rather than on verified fact. The Clan del Golfo has already used economic paralysis as political messaging across 178 municipalities. One non-destructive overflight satisfies all three.
- Single-Lane Failure Point: Agua Clara and Cocoli are each one lane of three chambers. Disabling both gates at one lock head closes the complex. The Titán crane lifts 350 t against gates of 2,300 to 4,300 t designed never to be lifted. No published recovery plan exists for a gate stuck off its rails.
- Repricing Precedes Attack: War risk premiums at Bab al-Mandeb moved from 0.3 to 0.75 percent of hull value within 72 hours of a declared blockade in July 2026, before any confirmed attack. Underwriters reprice on 24 to 72 hour cycles and can cancel cover on 96 hours notice.
- Remediation Costs Four Days: Detection plus non-kinetic defeat runs $50 to 100 million against direct closure costs of $23.7 million per day. No legislation is required. The 2004 Protection Plan authority already covers it.
- Every chokepoint operator inherits this logic. Suez, Hormuz, Malacca and the Bosphorus share the same three conditions: immobilized traffic, per voyage war risk pricing, and an accessible capability base. Certification capacity, not physical hardening, becomes the governing security investment for waterway operators through the next decade.
The Panama Canal Authority protects the most concentrated captive-traffic asset in global trade with a security architecture built over two decades: closed-circuit television, more than 7,000 intruder-detection points, patrolled perimeters, vessel-perimeter radar and GPS monitoring, and a Security Control and Emergency Dispatch Center coordinating them. Against surface intrusion, land access and insider compromise, that architecture is dense and appropriate to the threats it was designed against.
Yet the quarter-trillion-dollar asset contains no known air-domain sensors, because for its entire history, it hasn't needed one.
Yet In the environment that has emerged since December 2023 it is the specific gap through which chokepoints are now closed, and the reason is set out below in the order the causality runs: what determines closure duration, why the canal cannot influence that variable, what would test it, what a test costs, and what breaking the chain requires.
