Events leading to the accident

The Unit 4 reactor was to be shut down for routine maintenance on 25 April 1986. It was decided to take advantage of this shutdown to determine whether, in the event of a loss of station power, the slowing turbine could provide enough electrical power to operate the emergency equipment and the core cooling water circulating pumps, until the diesel emergency power supply became operative. The aim of this test was to determine whether cooling of the core could continue to be ensured in the event of a loss of power.[64]

This type of test had been run during a previous shutdown period, but the results had been inconclusive, so it was decided to repeat it. Unfortunately, this test, which was considered essentially to concern the non-nuclear part of the power plant, was carried out without a proper exchange of information and coordination between the team in charge of the test and the personnel in charge of the operation and safety of the nuclear reactor. Therefore, inadequate safety precautions were included in the test programme and the operating personnel were not alerted to the nuclear safety implications of the electrical test and its potential danger.

The planned programme called for shutting off the reactor’s emergency core cooling system (ECCS), which provides water for cooling the core in an emergency. Although subsequent events were not greatly affected by this, the exclusion of this system for the whole duration of the test reflected a lax attitude towards the implementation of safety procedures.

As the shutdown proceeded, the reactor was operating at about half power when the electrical load dispatcher refused to allow further shutdown, as the power was needed for the grid. In accordance with the planned test programme, about an hour later the ECCS was switched off while the reactor continued to operate at half power. It was not until about 23:00 hr on 25 April that the grid controller agreed to a further reduction in power.

For this test, the reactor should have been stabilized at about 1000 MWth prior to shutdown, but due to operational error the power fell to about 30 MWth, where the positive void coefficient became dominant. The operators then tried to raise the power to 700-1000 MWth by switching off the automatic regulators and freeing all the control rods manually. It was only at about 01:00 hr on 26 April that the reactor was stabilized at about 200 MWth.

Although there was a standard operating order that a minimum of 30 control rods was necessary to retain reactor control, in the test only six to eight control rods were actually used. Many of the control rods were with­drawn to compensate for the build-up of xenon which acted as an absorber of neutrons and reduced power. This meant that if there were a power surge, about 20 s would be required to lower the control rods and shut the reactor down. In spite of this, it was decided to continue the test programme.

There was an increase in coolant flow and a resulting drop in steam pressure. The automatic trip, which would have shut down the reactor when the steam pressure was low, had been circumvented. In order to main­tain power the operators had to withdraw nearly all the remaining control rods. The reactor became very unstable and the operators had to make adjustments every few seconds trying to maintain constant power.

At about this time, the operators reduced the flow of feedwater, pre­sumably to maintain the steam pressure. Simultaneously, the pumps that were powered by the slowing turbine were providing less cooling water to the reactor. The loss of cooling water exaggerated the unstable condition of the reactor by increasing steam production in the cooling channels (posi­tive void coefficient), and the operators could not prevent an overwhelming power surge, estimated to be 100 times the nominal power output.

The sudden increase in heat production ruptured part of the fuel and small hot fuel particles, reacting with water, caused a steam explosion, which destroyed the reactor core. A second explosion added to the destruction two to three seconds later. While it is not known for certain what caused the explosions, it is postulated that the first was a steam/hot fuel explosion, and that hydrogen may have played a role in the second.