The Cardboard Revolution: How Ukraine's Streets Defended Its Anti-Corruption Architecture

In nine days in July 2025, Ukrainian citizens did what years of reform advocacy could not guarantee: they forced their wartime government to reverse a law that would have gutted the two institutions at the heart of Ukraine's anti-corruption system — and handed a real-time stress test to every score in the CRI.

There is a recurring question that every foreign investor, Western official, and investigative journalist eventually asks about Ukraine: will the anti-corruption framework hold? Not in theory, not on paper — but when pressure comes from the top, from inside the Presidential Office, from the people with the most to lose from independent prosecutors doing their jobs. July 2025 was the moment that question stopped being hypothetical.

On July 22, 2025, the Verkhovna Rada passed Bill No. 12414 by a vote of 263 in favor. President Volodymyr Zelenskyy signed it into law the same evening. The bill granted the Prosecutor General — a presidential appointee and Zelenskyy loyalist Ruslan Kravchenko — sweeping new powers over Ukraine's two most important anti-corruption bodies: the National Anti-Corruption Bureau (NABU) and the Specialized Anti-Corruption Prosecutor's Office (SAPO). Under the new law, the prosecutor general could reassign NABU cases to other bodies, issue binding directives to NABU detectives, and become the sole authority with power to charge high-ranking officials with corruption.

The legislative maneuver was swift, opaque, and — according to multiple credible Ukrainian sources — deliberate. Based on sources within parliament, law enforcement agencies, and the Presidential team, Ukrainska Pravda reported that the plan had been developed within the President's Office, particularly by head of the President's Office Andriy Yermak, after investigations against various figures upset Zelenskyy. The Economist described the bill as "orchestrated from the top."

The streets respond

Within hours of the signing, something unprecedented happened. For the first time since the full-scale Russian invasion began, Ukrainians gathered to protest their own government. Under martial law, street rallies are prohibited — which meant that anyone who showed up understood exactly what they were doing, and did it anyway. The movement quickly acquired a name: the Cardboard Revolution, or Cardboard Maidan, after the homemade signs that protesters fashioned on-site, writing their own words in marker. Chants included "Hands off NABU!", "No to dictatorship," and — most pointedly — "People are giving their lives for our future, and the authorities are destroying it."

By July 23, protests had begun in at least 17 cities: Kyiv, Lviv, Dnipro, Kharkiv, Odesa, Mykolaiv, Chernihiv, Kremenchuk, Chernivtsi, Ivano-Frankivsk, and more. Soldiers on leave joined. A war veteran named Dmytro Koziatynskyi issued the initial appeal "to ordinary concerned citizens." A 25-year-old musician serving in the Armed Forces told reporters that further protests may yet be inevitable: "Maybe the government has gotten a bit complacent. But there are young people who are ready to show up at these rallies."

What the CRI captured — and why it matters

The Ukraine Corruption Risk Index was built precisely for moments like this. Not as a snapshot of static guilt, but as a living instrument tracking the institutional landscape around politically exposed persons in real time. The July crisis mapped directly onto the CRI's architecture in three ways.

First, the key figures behind the legislation were already flagged in the index. Andriy Yermak, identified in CRI data as having "orchestrated NABU crackdown" and showing "Operation Midas proximity," scored 788 — High band — before his November 2025 resignation following a NABU search. Ruslan Kravchenko, the Prosecutor General who stood to acquire sweeping new powers under Bill 12414, is scored at 570 in the Elevated band, with the specific note: "seen as Yermak protégé; used SBU against NABU investigators 2025." Parliament Speaker Ruslan Stefanchuk, who led the July 22 vote, holds a Moderate score of 500 — reflecting that he ultimately reversed course under pressure, but not before enabling the initial damage.

Second, the crisis validated the CRI's core logic: that score movement is as informative as score level. When Bill 12414 passed, the index flagged an institutional deterioration event — the kind that should move any investor's or policymaker's risk calculus, regardless of which individual they're tracking. And when Bill 13533 was signed nine days later, restoring independence, the index moved in the other direction. That oscillation is the story: Ukraine's anti-corruption architecture was tested, nearly failed, and recovered — not through elite goodwill, but through street pressure and international financial leverage.

Third, the episode directly implicated active CRI investigations. Critics pointed out the law could have made it easier for the government to choose which corruption cases to prosecute — and given that NABU was actively running Operation Midas, which ensnared figures in the Presidential orbit including figures scoring in the Critical and High bands of the CRI, the timing was not coincidental.

The international stakes were financial, not just symbolic

The European Union said it would freeze $1.7bn — a third of its latest aid package — because of the new law. For a country running its economy on foreign assistance while fighting a full-scale war, this was not abstract diplomatic language. It was a financial ultimatum delivered in real time, and it worked alongside the street pressure to produce a reversal in nine days.

For American decision-makers in particular, the episode illustrates why the CRI is built around institutional signal as much as individual score. A law that subordinates NABU to a presidential appointee does not merely change one official's risk profile — it changes the effective risk profile of every active investigation, every frozen asset, and every reconstruction contract that depends on rule-of-law conditions being met. When the OECD warns that such a law would undermine the credibility of partners "considering investing in Ukraine's defense sector and its long-term reconstruction," that is a direct translation of institutional corruption risk into capital allocation risk.

What it means for the CRI going forward

The July 2025 crisis and its resolution are reflected across multiple entries in CRI Version 5 (April 2026). Yermak's departure, Zelenskyy's score movement into the Elevated band, Kravchenko's continued Elevated designation, and — critically — the Low scores maintained by NABU Director Kryvonos and SAPO Head Klymenko all reflect the outcome of this episode. The index treats the restoration of institutional independence as a genuine signal: those who fought to protect NABU and SAPO score lower (less risk); those who engineered the attack score higher, regardless of whether formal charges followed.

The Cardboard Revolution also clarified something the CRI's methodology had always assumed but had not yet been tested on: Ukrainian civil society is a genuine accountability mechanism, not merely an advocacy ecosystem. When protesters gathered under martial law, handwriting signs in real time — not because think tanks told them to, but because they understood that NABU and SAPO stand between them and a state apparatus that could otherwise protect its own — they demonstrated a civic immune response that no index score can fully capture, but that every score in the CRI depends on functioning.

The monthly CRI update will continue to track score changes for all figures implicated in the July crisis. CRI Version 6, publishing May 2026, will incorporate the full post-July institutional picture, including Yermak's resignation, the Law 12414 reversal, and any new HACC proceedings stemming from Operation Midas.