On other free speech platforms, like Gab, it usually starts with an influx of new users advocating violence, followed by an incident which can be blamed on the network.
It wouldn't surprise me if they take a different approach with Nostr though. Maybe once a few more banks collapse they'll say the Russians used Nostr to spread disinformation and encourage bank runs.