Forrest Gump on Bankova: The Raiding Scandal Reaches the President's Office — and the Cardboard Comes Back
August gave the index its darkest storyline yet: a criminal organization allegedly run by sitting and former MPs, operating with officials inside the Presidential Office, that raided companies, forged court rulings, tampered with state registries — and laundered the money that bailed out the Midas case's star defendant. A deputy head of the President's Office is out and under suspicion. The street came back for a third summer. And Ukraine's asset agency beat a sanctioned Russian billionaire and his hackers in the same week. The August Corruption Risk Index scores it all.
Every month since May, the CRI has tracked the slow-motion demolition of the network that ran Ukraine from the Presidential Office. August was the month the investigation walked back in the front door. Operation Forrest Gump — and its second act, Operation Themis — is NABU and SAPO's most structurally alarming case of the war: not one corrupt official, but an organization, with a parliamentary roof, a Presidential Office liaison, a captive state bank, tame judges, and its own hackers inside the Ministry of Justice registries. The August index scores 388 active figures on the 430–850 scale, with 43 Personae Non Gratae above the ceiling.
The scandal: an organization, not an official
According to NABU and SAPO, the scheme worked like this. In autumn 2025, the organization seized two enterprises with assets worth UAH 248 million through forged court decisions and unauthorized interference in the Justice Ministry's information systems. The real prize was real estate: control of one company was the vehicle for a property in central Kyiv worth over UAH 500 million. In May 2026 the group attempted another UAH 207 million seizure and failed only, in the investigators' dry phrasing, "due to circumstances beyond their control." And in June, members of the organization allegedly laundered UAH 150 million in cash through four shell-company accounts at state-owned Sense Bank — the exact money that posted bail for former Energy and Justice Minister German Halushchenko, the Midas case's most senior detainee, on June 29.
Then came the names. On August 19, hours after NABU announced the operation, President Zelenskyy dismissed Iryna Mudra — his Deputy Head of Office for legal affairs and judicial reform, the former Deputy Justice Minister who helped build Ukraine's international legal case against Russia — by one-sentence decree. She was served a notice of suspicion the same day and, per MP Oleksiy Honcharenko, spent the night in a temporary detention facility (her lawyer disputes the detention, not the suspicion). Ukrainian media, citing law-enforcement sources, identify the organization's leaders as sitting MP Vadym Stolar, whose premises were searched that morning, and former MP and ex-Ukrbud chief Maksym Mykytas. On August 28, businessman Vasyl Astion — the "Vasya" of NABU's published wiretaps — was formally charged as the group's judicial fixer, recruited for his influence over commercial court judges.
The Midas case exposed a network that stole from the energy sector. Forrest Gump alleges something worse: a network that stole the state's own instruments — its registries, its courts, its bank — and used them as tools.
Risers: the August scoreboard
The Stefanishyna arc deserves its own line. In July the index raised her on the SAPO investigation and the resignation-before-charges pattern. August confirmed the read in full: the formal suspicion landed within a week of her leaving the Washington embassy, prosecutors put the undeclared assets on the record — two Fayna Town apartments held through a friend, a Mercedes and premises through associates — and disclosed something more serious than enrichment: an attempt to influence the selection of NABU's own director. When a former Deputy PM for European Integration is accused of reaching into the anti-corruption bureau's leadership contest, the 816 is not an outlier. It is the system pricing betrayal of the reform mandate itself.
Losers — and what counts as winning
In a corruption index, "losers" are the good news. August delivered three kinds. Finality: the appellate court upheld Roman Nasirov's six-year prison sentence — one of the longest-running NABU cases reaching an irreversible end — and HACC approved Vsevolod Kniaziev's plea agreement, closing the file on the most senior judge ever charged in Ukraine. Both remain Personae Non Gratae; both entries now record completed accountability, which is what the register exists to document. Normalization: Yevhenii Khmara resigned his general's commission and was confirmed Defense Minister by 312 votes as a civilian — an institutional footnote with real weight in a country where the July crisis was precisely about military accountability to civilians. And exposure priced in: the Presidential Office itself, which has now produced Yermak (PNG), Smyrnov (PNG), Tatarov (PNG), Kyrylo Tymoshenko (PNG) — and, as of August 19, Mudra. The institution's alumni record is the single strongest argument in the index's data.
The third cardboard summer — and the streak that broke
For the third August in a row, handmade signs appeared outside government buildings. This time the sequence ran differently. Fedorov — fired in July despite being the cabinet's most popular member — released his August 18 address warning of a "crisis of governance" and calling for the first wartime presidential election. The next morning, protesters gathered at Mariinsky Park demanding his reinstatement and opposing Khmara's confirmation. The Rada confirmed Khmara anyway, 312 votes, the same day NABU raided the Presidential Office's legal chief.
The honest read: the street's two-summer winning streak — the anti-NABU law reversed in 2025, Syrskyi removed in 2026 — did not extend to August. But the deeper mechanism held. The demand in July was accountability in military leadership; it was met. The August protest was about a personnel preference, and personnel preferences are what parliaments are for. The index treats the distinction as a sign of institutional maturation, not civic defeat: the cardboard now functions as a calibrated instrument, decisive when institutions fail, absorbable when they function. Whether Fedorov's election call converts protest energy into electoral politics is the autumn's defining question.
ARMA beats Fridman — and his hackers
The month's quietest win was the most internationally consequential. ARMA — Ukraine's seized-asset agency — spent August in a three-front battle over IDS Ukraine, the UAH 7.4 billion ($165M revenue) mineral-water group behind Morshynska, Myrhorodska, Alaska and Aqua Life, seized from sanctioned Russian billionaire Mikhail Fridman. Front one: the courts — a ruling on the management tender established no violations by the agency, cutting through months of challenges from IDS and from tender complainants. Front two: the hackers — on August 18, days before the bid deadline, ARMA's servers were hit by an intrusion Ukrainian officials link to APT28, the GRU's cyber unit that has breached over 170 targets. The agency disclosed the attack, kept the process open, and closed the tender on schedule August 22 with five bids advancing to the final stage. Front three: Fridman himself, who is simultaneously suing the Netherlands in Dubai arbitration in a case experts call a key test of whether EU sanctions survive investment-treaty challenges.
The index's honesty requirement cuts both ways, so here is the caveat: ARMA won August while itself being an August risk story. The agency remains under SAPO criminal investigation in the case that helped bring down Stefanishyna, and its Deputy Chairman Pavlo Velikorechanin carries a 716 High score in this index. An institution can defeat a Russian oligarch's lawfare and require reform at the same time. Both facts are in the data.
- The threat model changed. Forrest Gump is not bribery — it is state capture in miniature: registries, courts, and a state bank operated as criminal infrastructure. Due-diligence screening that only checks officials misses organizations.
- The Presidential Office alumni record is the risk signal. Five senior OP figures are now PNG or Critical. Proximity to Bankova is a scoring factor, not a credential.
- Accountability is reaching finality. Nasirov's upheld sentence and Kniaziev's plea are completed outcomes, not process. The system convicts.
- The Fridman precedent matters beyond Ukraine. ARMA's tender surviving courts and GRU hackers — while Fridman tests EU sanctions in Dubai arbitration — is the frontline of whether seized Russian assets can actually be managed for the sanctioning states.
Methodology note
CRI v8 scores 388 active figures on the 430–850 scale (430 = lowest risk, 850 = highest), with 43 Personae Non Gratae held above the ceiling. Scores draw on NABU, SAPO, HACC, NAZK, ESBU/BEB and ARMA records, US/EU sanctions lists, court proceedings, verified investigative reporting, and AI-assisted press analysis. Figures identified by media but not yet formally named by NABU — Stolar, Mykytas — carry score adjustments without the ★ charged flag, which is reserved for served notices of suspicion. The four newly-suspected Supreme Court judges are not yet entered: names first. A score is not a legal finding; no score implies guilt.