Nuclear meltdown

Nuclear power plants generate electricity by heating fluid via a nuclear reaction to run a generator. If the heat from that reaction is not removed adequately, the fuel assemblies in a reactor core can melt. A core damage incident can occur even after a reactor is shut down because the fuel continues to produce decay heat. A core damage accident is caused by the loss of sufficient cooling for the nuclear fuel within the reactor core. The reason may be one of several factors, including a loss-of-pressure-control accident, a loss-of-coolant accident (LOCA), an uncontrolled power excursion. Failures in control systems may cause a series of events resulting in loss of cooling. Contemporary safety principles of defense in depth ensure that multiple layers of safety systems are always present to make such accidents unlikely. The containment building is the last of several safeguards that prevent the release of radioactivity to the environment. Many commercial reactors are contained within a thick pre-stressed, steel-reinforced, air-tight concrete structure that can withstand hurricane-force winds and severe earthquakes. • In a loss-of-coolant accident, either the physical loss of coolant (which is typically deionized water, an inert gas, NaK, or liquid sodium) or the loss of a method to ensure a sufficient flow rate of the coolant occurs. A loss-of-coolant accident and a loss-of-pressure-control accident are closely related in some reactors. In a pressurized water reactor, a LOCA can also cause a "steam bubble" to form in the core due to excessive heating of stalled coolant or by the subsequent loss-of-pressure-control accident caused by a rapid loss of coolant. In a loss-of-forced-circulation accident, a gas cooled reactor's circulators (generally motor or steam driven turbines) fail to circulate the gas coolant within the core, and heat transfer is impeded by this loss of forced circulation, though natural circulation through convection will keep the fuel cool as long as the reactor is not depressurized. • In a loss-of-pressure-control accident, the pressure of the confined coolant falls below specification without the means to restore it. In some cases, this may reduce the heat transfer efficiency (when using an inert gas as a coolant), and in others may form an insulating "bubble" of steam surrounding the fuel assemblies (for pressurized water reactors). In the latter case, due to localized heating of the "steam bubble" due to decay heat, the pressure required to collapse the "steam bubble" may exceed reactor design specifications until the reactor has had time to cool down. (This event is less likely to occur in boiling water reactors, where the core may be deliberately depressurized so that the emergency core cooling system may be turned on). In a depressurization fault, a gas-cooled reactor loses gas pressure within the core, reducing heat transfer efficiency and posing a challenge to the cooling of fuel; as long as at least one gas circulator is available, however, the fuel will be kept cool. ==Light-water reactors (LWRs)==

Before the core of a light-water nuclear reactor can be damaged, two precursor events must have already occurred: • A limiting fault (or a set of compounded emergency conditions) that leads to the failure of heat removal within the core (the loss of cooling). Low water level uncovers the core, allowing it to heat up. • Failure of the emergency core cooling system (ECCS). The ECCS is designed to rapidly cool the core and make it safe in the event of the maximum fault (the design basis accident) that nuclear regulators and plant engineers could imagine. There are at least two copies of the ECCS built for every reactor. Each division (copy) of the ECCS is capable, by itself, of responding to the design basis accident. The latest reactors have as many as four divisions of the ECCS. This is the principle of redundancy, or duplication. As long as at least one ECCS division functions, no core damage can occur. Each of the several divisions of the ECCS has several internal "trains" of components. Thus the ECCS divisions themselves have internal redundancy – and can withstand failures of components within them. The Three Mile Island accident was a compounded group of emergencies that led to core damage. What led to this was an erroneous decision by operators to shut down the ECCS during an emergency condition due to gauge readings that were either incorrect or misinterpreted; this caused another emergency condition that, several hours after the fact, led to core exposure and a core damage incident. If the ECCS had been allowed to function, it would have prevented both exposure and core damage. During the Fukushima incident the emergency cooling system had also been manually shut down several minutes after it started. If such a limiting fault occurs, and a complete failure of all ECCS divisions also occurs, both Kuan, et al and Haskin, et al describe six stages between the start of the limiting fault (the loss of cooling) and the potential escape of molten corium into the containment (a so-called "full meltdown"): • Uncovering of the core – In the event of a transient, upset, emergency, or limiting fault, LWRs are designed to automatically SCRAM (a SCRAM being the immediate and full insertion of all control rods) and spin up the ECCS. This greatly reduces reactor thermal power (but does not remove it completely); this delays core becoming uncovered, which is defined as the point when the fuel rods are no longer covered by coolant and can begin to heat up. As Kuan states: "In a small-break LOCA with no emergency core coolant injection, core uncovery [sic] generally begins approximately an hour after the initiation of the break. If the reactor coolant pumps are not running, the upper part of the core will be exposed to a steam environment and heatup of the core will begin. However, if the coolant pumps are running, the core will be cooled by a two-phase mixture of steam and water, and heatup of the fuel rods will be delayed until almost all of the water in the two-phase mixture is vaporized. The TMI-2 accident showed that operation of reactor coolant pumps may be sustained for up to approximately two hours to deliver a two phase mixture that can prevent core heatup." This is because the lower plenum of the RPV may have a substantial quantity of water - the reactor coolant - in it, and, assuming the primary system has not been depressurized, the water will likely be in the liquid phase, and consequently dense, and at a vastly lower temperature than the corium. Since corium is a liquid metal-ceramic eutectic at temperatures of , its fall into liquid water at may cause an extremely rapid evolution of steam that could cause a sudden extreme overpressure and consequent gross structural failure of the primary system or RPV. The American Nuclear Society has commented on the TMI-2 accident, that despite melting of about one-third of the fuel, the reactor vessel maintained its integrity and contained the damaged fuel. Breach of the primary pressure boundary There are several possibilities as to how the primary pressure boundary could be breached by corium. • Steam explosion As previously described, FCI could lead to an overpressure event leading to RPV fail, and thus, primary pressure boundary fail. Haskin et al report that in the event of a steam explosion, failure of the lower plenum is far more likely than ejection of the upper plenum in the alpha mode. In the event of lower plenum failure, debris at varied temperatures can be expected to be projected into the cavity below the core. The containment may be subject to overpressure, though this is not likely to fail the containment. The alpha-mode failure will lead to the consequences previously discussed. • Pressurized melt ejection (PME) It is quite possible, especially in pressurized water reactors, that the primary loop will remain pressurized following corium relocation to the lower plenum. As such, pressure stresses on the RPV will be present in addition to the weight stress that the molten corium places on the lower plenum of the RPV; when the metal of the RPV weakens sufficiently due to the heat of the molten corium, it is likely that the liquid corium will be discharged under pressure out of the bottom of the RPV in a pressurized stream, together with entrained gases. This mode of corium ejection may lead to direct containment heating (DCH). Severe accident ex-vessel interactions and challenges to containment Haskin et al identify six modes by which the containment could be credibly challenged; some of these modes are not applicable to core melt accidents. • Overpressure • Dynamic pressure (shockwaves) • Internal missiles • External missiles (not applicable to core melt accidents) • Meltthrough • Bypass Standard failure modes If the melted core penetrates the pressure vessel, there are theories and speculations as to what may then occur. In modern Russian plants, there is a "core catching device" in the bottom of the containment building. The melted core is supposed to hit a thick layer of a "sacrificial metal" that would melt, dilute the core and increase the heat conductivity, and finally the diluted core can be cooled down by water circulating in the floor. There has never been any full-scale testing of this device, however. In Western plants there is an airtight containment building. Though radiation would be at a high level within the containment, doses outside of it would be lower. Containment buildings are designed for the orderly release of pressure without releasing radionuclides, through a pressure release valve and filters. Hydrogen/oxygen recombiners also are installed within the containment to prevent gas explosions. In a melting event, one spot or area on the RPV will become hotter than other areas, and will eventually melt. When it melts, corium will pour into the cavity under the reactor. Though the cavity is designed to remain dry, several NUREG-class documents advise operators to flood the cavity in the event of a fuel melt incident. This water will become steam and pressurize the containment. Automatic water sprays will pump large quantities of water into the steamy environment to keep the pressure down. Catalytic recombiners will rapidly convert the hydrogen and oxygen back into water. One debated positive effect of the corium falling into water is that it is cooled and returns to a solid state. Extensive water spray systems within the containment along with the ECCS, when it is reactivated, will allow operators to spray water within the containment to cool the core on the floor and reduce it to a low temperature. These procedures are intended to prevent release of radioactivity. In the Three Mile Island event in 1979, a theoretical person standing at the plant property line during the entire event would have received a dose of approximately 2 millisieverts (200 millirem), between a chest X-ray's and a CT scan's worth of radiation. This was due to outgassing by an uncontrolled system that, today, would have been backfitted with activated carbon and HEPA filters to prevent radionuclide release. In the Fukushima incident, however, this design failed. Despite the efforts of the operators at the Fukushima Daiichi nuclear power plant to maintain control, the reactor cores in units 1–3 overheated, the nuclear fuel melted and the three containment vessels were breached. Hydrogen was released from the reactor pressure vessels, leading to explosions inside the reactor buildings in units 1, 3 and 4 that damaged structures and equipment and injured personnel. Radionuclides were released from the plant to the atmosphere and were deposited on land and on the ocean. There were also direct releases into the sea. As the natural decay heat of the corium eventually reduces to an equilibrium with convection and conduction to the containment walls, it becomes cool enough for water spray systems to be shut down and the reactor to be put into safe storage. The containment can be sealed with release of extremely limited offsite radioactivity and release of pressure. After perhaps a decade for fission products to decay, the containment can be reopened for decontamination and demolition. Another scenario sees a buildup of potentially explosive hydrogen, but passive autocatalytic recombiners inside the containment are designed to prevent this. In Fukushima, the containments were filled with inert nitrogen, which prevented hydrogen from burning; the hydrogen leaked from the containment to the reactor building, however, where it mixed with air and exploded. Speculative failure modes One scenario consists of the reactor pressure vessel failing all at once, with the entire mass of corium dropping into a pool of water (for example, coolant or moderator) and causing extremely rapid generation of steam. The pressure rise within the containment could threaten integrity if rupture disks could not relieve the stress. Exposed flammable substances could burn, but there are few, if any, flammable substances within the containment. Another theory, called an "alpha mode" failure by the 1975 Rasmussen (WASH-1400) study, asserted steam could produce enough pressure to blow the head off the reactor pressure vessel (RPV). The containment could be threatened if the RPV head collided with it. (The WASH-1400 report was replaced by better-based newer studies, and now the Nuclear Regulatory Commission has disavowed them all and is preparing the overarching State-of-the-Art Reactor Consequence Analyses [SOARCA] study - see the Disclaimer in NUREG-1150.) By 1970, there were doubts about the ability of the emergency cooling systems of a nuclear reactor to prevent a loss-of-coolant accident and the consequent meltdown of the fuel core; the subject proved popular in the technical and the popular presses. In 1971, in the article Thoughts on Nuclear Plumbing, former Manhattan Project nuclear physicist Ralph Lapp used the term "China syndrome" to describe a possible burn through of the containment structures, and the subsequent escape of radioactive material(s) into the atmosphere and environment. The hypothesis derived from a 1967 report by a group of nuclear physicists, headed by W. K. Ergen. Some fear that a molten reactor core could penetrate the reactor pressure vessel and containment structure and burn downwards to the level of the groundwater. It has not been determined to what extent a molten mass can melt through a structure (although that was tested in the loss-of-fluid-test reactor described in Test Area North's fact sheet). The Three Mile Island accident provided real-life experience with a molten core: the corium failed to melt through the reactor pressure vessel after over six hours of exposure due to dilution of the melt by the control rods and other reactor internals, validating the emphasis on defense in depth against core damage incidents. ==Other reactor types==

Other types of reactors have different capabilities and safety profiles than the LWR does. Advanced varieties of several of these reactors have the potential to be inherently safe. CANDU reactors CANDU reactors, Canadian-invented deuterium-uranium design, are designed with at least one, and generally two, large low-temperature and low-pressure water reservoirs around their fuel/coolant channels. The first is the bulk heavy-water moderator (a separate system from the coolant), and the second is the light-water-filled shield tank (or calandria vault). These backup heat sinks are sufficient to prevent either the fuel meltdown in the first place (using the moderator heat sink), or the breaching of the core vessel should the moderator eventually boil off (using the shield tank heat sink). Other failure modes aside from fuel melt will probably occur in a CANDU rather than a meltdown, such as deformation of the calandria into a non-critical configuration. All CANDU reactors are located within standard Western containments as well. Gas-cooled reactors One type of Western reactor, known as the advanced gas-cooled reactor (or AGR), built by the United Kingdom, is not very vulnerable to loss-of-cooling accidents or to core damage except in the most extreme of circumstances. By virtue of the relatively inert coolant (carbon dioxide), the large volume and high pressure of the coolant, and the relatively high heat transfer efficiency of the reactor, the time frame for core damage in the event of a limiting fault is measured in days. Restoration of some means of coolant flow will prevent core damage from occurring. Lead and lead-bismuth-cooled reactors Recently heavy liquid metal, such as lead or lead-bismuth, has been proposed as a reactor coolant. Because of the similar densities of the fuel and the HLM, an inherent passive safety self-removal feedback mechanism due to buoyancy forces is developed, which propels the packed bed away from the wall when certain threshold of temperature is attained and the bed becomes lighter than the surrounding coolant, thus preventing temperatures that can jeopardize the vessel’s structural integrity and also reducing the recriticality potential by limiting the allowable bed depth. Experimental or conceptual designs Some design concepts for nuclear reactors emphasize resistance to meltdown and operating safety. The PIUS (process inherent ultimate safety) designs, originally engineered by the Swedes in the late 1970s and early 1980s, are LWRs that by virtue of their design are resistant to core damage. No units have ever been built. Power reactors, including the Deployable Electrical Energy Reactor, a larger-scale mobile version of the TRIGA for power generation in disaster areas and on military missions, and the TRIGA Power System, a small power plant and heat source for small and remote community use, have been put forward by interested engineers, and share the safety characteristics of the TRIGA due to the uranium zirconium hydride fuel used. The Hydrogen Moderated Self-regulating Nuclear Power Module, a reactor that uses uranium hydride as a moderator and fuel, similar in chemistry and safety to the TRIGA, also possesses these extreme safety and stability characteristics, and has attracted a good deal of interest in recent times. The liquid fluoride thorium reactor is designed to naturally have its core in a molten state, as a eutectic mix of thorium and fluorine salts. As such, a molten core is reflective of the normal and safe state of operation of this reactor type. In the event the core overheats, a metal plug will melt, and the molten salt core will drain into tanks where it will cool in a non-critical configuration. Since the core is liquid, and already melted, it cannot be damaged. Advanced liquid metal reactors, such as the U.S. Integral Fast Reactor and the Russian BN-350, BN-600, and BN-800, all have a coolant with very high heat capacity, sodium metal. As such, they can withstand a loss of cooling without SCRAM and a loss of heat sink without SCRAM, qualifying them as inherently safe. ==Soviet Union–designed reactors==

RBMKs Soviet-designed RBMK reactors (Reaktor Bolshoy Moshchnosti Kanalnyy), found only in Russia and other post-Soviet states and now shut down everywhere except Russia, do not have containment buildings, are naturally unstable (tending to dangerous power fluctuations), and have emergency cooling systems (ECCS) considered grossly inadequate by Western safety standards. RBMK emergency core cooling systems only have one division and little redundancy within that division. Though the large core of the RBMK is less energy-dense than the smaller Western LWR core, it is harder to cool. The RBMK is moderated by graphite. In the presence of both steam and oxygen at high temperatures, graphite forms synthesis gas and with the water gas shift reaction, the resultant hydrogen burns explosively. If oxygen contacts hot graphite, it will burn. Control rods used to be tipped with graphite, a material that slows neutrons and thus speeds up the chain reaction. Water is used as a coolant, but not a moderator. If the water boils away, cooling is lost, but moderation continues. This is termed a positive void coefficient of reactivity. The RBMK tends towards dangerous power fluctuations. Control rods can become stuck if the reactor suddenly heats up and they are moving. Xenon-135, a neutron absorbent fission product, has a tendency to build up in the core and burn off unpredictably in the event of low power operation. This can lead to inaccurate neutronic and thermal power ratings. The RBMK does not have any containment above the core. The only substantial solid barrier above the fuel is the upper part of the core, called the upper biological shield, which is a piece of concrete interpenetrated with control rods and with access holes for refueling while online. Other parts of the RBMK were shielded better than the core itself. Rapid shutdown (SCRAM) takes 10 to 15 seconds. Western reactors take 1 - 2.5 seconds. Western aid has been given to provide certain real-time safety monitoring capacities to the operating staff. Whether this extends to automatic initiation of emergency cooling is not known. Training has been provided in safety assessment from Western sources, and Russian reactors have evolved in response to the weaknesses that were in the RBMK. Nonetheless, numerous RBMKs still operate. Though it might be possible to stop a loss-of-coolant event prior to core damage occurring, any core damage incidents will probably allow massive release of radioactive materials. Upon entering the EU in 2004, Lithuania was required to phase out its two RBMKs at Ignalina NPP, deemed incompatible with European nuclear safety standards. The country planned to replace them with safer reactors at Visaginas Nuclear Power Plant. MKER The MKER is a modern Russian-engineered channel type reactor that is a distant descendant of the RBMK, designed to optimize the benefits and fix the serious flaws of the original. Several unique features of the MKER's design make it a credible and interesting option. The reactor remains online during refueling, ensuring outages only occasionally for maintenance, with uptime up to 97–99%. The moderator design allows the use of less-enriched fuels, with a high burnup rate. Neutronics characteristics have been optimized for civilian use, for superior fuel fertilization and recycling; and graphite moderation achieves better neutronics than is possible with light water moderation. The lower power density of the core greatly enhances thermal regulation. An array of improvements make the MKER's safety comparable to Western Generation III reactors: improved quality of parts, advanced computer controls, comprehensive passive emergency core cooling system, and very strong containment structure, along with a negative void coefficient and a fast-acting rapid shutdown system. The passive emergency cooling system uses reliable natural phenomena to cool the core, rather than depending on motor-driven pumps. The containment structure is designed to withstand severe stress and pressure. In the event of a pipe break of a cooling-water channel, the channel can be isolated from the water supply, preventing a general failure. The enhanced safety of the MKER design enhance its competitiveness in countries considering full fuel-cycle options for nuclear development. VVER The VVER is a pressurized light-water reactor that is far more stable and safe than the RBMK. This is because it uses light water as a moderator (rather than graphite), has well-understood operating characteristics, and has a negative void coefficient of reactivity. In addition, some have been built with more than marginal containments, some have quality ECCS systems, and some have been upgraded to international standards of control and instrumentation. Present generations of VVERs (starting from the VVER-1000) are built to Western-equivalent levels of instrumentation, control, and containment systems. Even with these positive developments, however, certain older VVER models raise a high level of concern, especially the VVER-440 V230. The VVER-440 V230 has no containment building, but only has a structure capable of confining steam surrounding the RPV. This is a volume of thin steel, perhaps in thickness, grossly insufficient by Western standards. • Has no ECCS. Can survive at most one pipe break (there are many pipes greater than that size within the design). • Has six steam generator loops, adding unnecessary complexity. • Apparently steam generator loops can be isolated, however, in the event that a break occurs in one of these loops. The plant can remain operating with one isolated loop—a feature found in few Western reactors. The interior of the pressure vessel is plain alloy steel, exposed to water. This can lead to rust, if the reactor is exposed to water. One point of distinction in which the VVER surpasses the West is the reactor water cleanup facility—built, no doubt, to deal with the enormous volume of rust within the primary coolant loop—the product of the slow corrosion of the RPV. This model is viewed as having inadequate process control systems. Bulgaria had a number of VVER-440 V230 models, but they opted to shut them down upon joining the EU rather than backfit them, and are instead building new VVER-1000 models. Many non-EU states maintain V230 models, including Russia and the CIS. Many of these states, rather than abandon the reactors entirely, have opted to install an ECCS, develop standard procedures, and install proper instrumentation and control systems. Though confinements cannot be transformed into containments, the risk of a limiting fault resulting in core damage can be greatly reduced. The VVER-440 V213 model was built to the first set of Soviet nuclear safety standards. It possesses a modest containment building, and the ECCS systems, though not completely to Western standards, are reasonably comprehensive. Many VVER-440 V213 models operated by former Soviet bloc countries have been upgraded to fully automated Western-style instrumentation and control systems, improving safety to Western levels for accident prevention—but not for accident containment, which is of a modest level compared to Western plants. These reactors are regarded as "safe enough" by Western standards to continue operation without major modifications, though most owners have performed major modifications to bring them up to generally equivalent levels of nuclear safety. During the 1970s, Finland built two VVER-440 V213 models to Western standards with a large-volume full containment and world-class instrumentation, control standards and an ECCS with multiple redundant and diversified components. In addition, passive safety features such as 900-tonne ice condensers have been installed, making these two units safety-wise the most advanced VVER-440s in the world. The VVER-1000 type has a definitely adequate Western-style containment, the ECCS is sufficient by Western standards, and instrumentation and control has been markedly improved to Western 1970s-era levels. == Effects ==

The effects of a nuclear meltdown depend on the safety features designed into a reactor. A modern reactor is designed both to make a meltdown unlikely, and to contain one should it occur. In a modern reactor, a nuclear meltdown, whether partial or total, should be contained inside the reactor's containment structure. Thus (assuming that no other major disasters occur) while the meltdown will severely damage the reactor itself, possibly contaminating the whole structure with highly radioactive material, a meltdown alone should not lead to significant radioactivity release or danger to the public. == Reactor design ==

Although pressurized water reactors are more susceptible to nuclear meltdown in the absence of active safety measures, this is not a universal feature of civilian nuclear reactors. Much of the research in civilian nuclear reactors is for designs with passive nuclear safety features that may be less susceptible to meltdown, even if all emergency systems failed. For example, pebble bed reactors are designed so that complete loss of coolant for an indefinite period does not result in the reactor overheating. The General Electric ESBWR and Westinghouse AP1000 have passively activated safety systems. The CANDU reactor has two low-temperature and low-pressure water systems surrounding the fuel (i.e. moderator and shield tank) that act as back-up heat sinks and preclude meltdowns and core-breaching scenarios. had been explicitly engineered to be meltdown-immune. It was tested in April 1986, just before the Chernobyl disaster, to simulate loss of coolant pumping power, by switching off the power to the primary pumps. As designed, it shut itself down, in about 300 seconds, as soon as the temperature rose to a point designed as higher than proper operation would require. This was well below the boiling point of the unpressurised liquid metal coolant, which had entirely sufficient cooling ability to deal with the heat of fission product radioactivity, by simple convection. The second test, deliberate shut-off of the secondary coolant loop that supplies the generators, caused the primary circuit to undergo the same safe shutdown. This test simulated the case of a water-cooled reactor losing its steam turbine circuit, perhaps by a leak. United States • The Westinghouse TR-2 suffered partial core damage in 1960 when a likely fuel cladding defect caused one fuel element (out of over 200) to overheat and melt. • The SL-1 prototype reactor at the National Reactor Testing Station in Idaho experienced a prompt criticality event and was destroyed in 1961 after an operator assisted in manually moving the central control rod. • The reactor at EBR-I suffered a partial meltdown during a coolant flow test on 29 November 1955. • The Sodium Reactor Experiment in Santa Susana Field Laboratory was an experimental nuclear reactor that operated from 1957 to 1964 and was the first commercial power plant in the world to experience a core meltdown in July 1959. • The partial meltdown at the Fermi 1 experimental fast breeder reactor, in 1966, required the reactor to be repaired, though it never achieved full operation afterward. • The SNAP8DR reactor at the Santa Susana Field Laboratory experienced damage to approximately a third of its fuel in an accident in 1969. • The Three Mile Island accident, in 1979, referred to in the press as a "partial core melt", led to the total dismantlement and the permanent shutdown of reactor 2. Unit 1 continued to operate until 2019. Soviet Union in 2013 • A number of Soviet Navy nuclear submarines experienced nuclear meltdowns, including K-27, K-140, and K-431. • Reactor 4 of the Chernobyl Nuclear Power Plant experienced a full reactor meltdown and steam explosion after being put into an unsafe configuration. Japan • During the Fukushima Daiichi nuclear disaster following the earthquake and tsunami in March 2011, three of the power plant's six reactors suffered meltdowns. Most of the fuel in the reactor No. 1 Nuclear Power Plant melted. Switzerland • The Lucens reactor, Switzerland, in 1969. Canada • NRX (military), Ontario, Canada, in 1952 United Kingdom • Windscale (military), Sellafield, England, in 1957 (see Windscale fire) • Chapelcross nuclear power station (civilian), Scotland, in 1967 France • Saint-Laurent Nuclear Power Plant (civilian), France, in 1969 == China syndrome ==

The China syndrome (loss-of-coolant accident) is a theoretical type of nuclear reactor operations accident characterized by the severe meltdown of the core components of the reactor, which then burn through the containment vessel and the housing building, then (figuratively) through the crust and body of the Earth until reaching the opposite end, presumed to be in "China". The name China syndrome was likely popularized by the 1979 movie, which coincidentally released just days before the real Three Mile Island incident. While the antipodes of China include Argentina with its Atucha Nuclear Power Plant, the phrasing is metaphorical; there is no way a core could penetrate the several-kilometer thickness of the Earth's crust, and even if it did melt to the center of the Earth, it would not travel back upwards against the pull of gravity. Moreover, any tunnel behind the material would be closed by immense lithostatic pressure. Additionally, there is no evidence that corium is able to penetrate through anywhere near as much rock as is suggested by the name. History The system design of the nuclear power plants built in the late 1960s raised the concern that a severe reactor accident could release large quantities of radioactive materials into the atmosphere and environment. By 1970, there were doubts about the ability of the emergency core cooling system to cope with the effects of a loss of coolant accident and the consequent meltdown of the fuel core. Thus, the TMI-2 reactor fuel and fission products breached the fuel rods, but the melted core itself did not break the containment of the reactor vessel. A similar concern arose during the Chernobyl disaster. After the reactor was destroyed, a liquid corium mass from the melting core began to breach the concrete floor of the reactor vessel, which was situated above the bubbler pool (a large water reservoir for emergency pumps and to contain any steam pipe rupture). There was concern that a steam explosion would have occurred if the hot corium made contact with the water, resulting in more radioactive materials being released into the air. Due to damages from the accident, three station workers manually operated the valves necessary to drain this pool. However, this concern was proven to be unfounded as (unknown to those at the time) the corium already contacted the reservoir before it could be drained, where instead of creating a steam explosion it harmlessly cooled rapidly and created a light-brown ceramic pumice that floated on the water. == See also ==