Nuclear meltdown
A nuclear meltdown (core meltdown, core melt accident, meltdown or partial core melt[2]) is a severe nuclear reactor accident that results in core damage from overheating. The term nuclear meltdown is not officially defined by the International Atomic Energy Agency[3] or by the United States Nuclear Regulatory Commission.[4] It has been defined to mean the accidental melting of the core of a nuclear reactor,[5] however, and is in common usage a reference to the core's either complete or partial collapse.
A core meltdown accident occurs when the heat generated by a nuclear reactor exceeds the heat removed by the cooling systems to the point where at least one nuclear fuel element exceeds its melting point. This differs from a fuel element failure, which is not caused by high temperatures. A meltdown may be caused by a loss of coolant, loss of coolant pressure, or low coolant flow rate or be the result of a criticality excursion in which the reactor is operated at a power level that exceeds its design limits. Alternatively, an external fire may endanger the core, leading to a meltdown.
Once the fuel elements of a reactor begin to melt, the fuel cladding has been breached, and the nuclear fuel (such as uranium, plutonium, or thorium) and fission products (such as caesium-137, krypton-85, or iodine-131) within the fuel elements can leach out into the coolant. Subsequent failures can permit these radioisotopes to breach further layers of containment. Superheated steam and hot metal inside the core can lead to fuel–coolant interactions, hydrogen explosions, or steam hammer, any of which could destroy parts of the containment. A meltdown is considered very serious because of the potential for radioactive materials to breach all containment and escape (or be released) into the environment, resulting in radioactive contamination and fallout, and potentially leading to radiation poisoning of people and animals nearby.
Nuclear power plants generate electricity by heating fluid via a nuclear reaction to run a generator. If the heat from that reaction is not removed adequately, the fuel assemblies in a reactor core can melt. A core damage incident can occur even after a reactor is shut down because the fuel continues to produce decay heat.
A core damage accident is caused by the loss of sufficient cooling for the nuclear fuel within the reactor core. The reason may be one of several factors, including a loss-of-pressure-control accident, a loss-of-coolant accident (LOCA), an uncontrolled power excursion or, in reactors without a pressure vessel, a fire within the reactor core. Failures in control systems may cause a series of events resulting in loss of cooling. Contemporary safety principles of defense in depth ensure that multiple layers of safety systems are always present to make such accidents unlikely.
The containment building is the last of several safeguards that prevent the release of radioactivity to the environment. Many commercial reactors are contained within a 1.2-to-2.4-metre (3.9 to 7.9 ft) thick pre-stressed, steel-reinforced, air-tight concrete structure that can withstand hurricane-force winds and severe earthquakes.
Soviet Union–designed reactors[edit]
RBMKs[edit]
Soviet-designed RBMK reactors (Reaktor Bolshoy Moshchnosti Kanalnyy), found only in Russia and other post-Soviet states and now shut down everywhere except Russia, do not have containment buildings, are naturally unstable (tending to dangerous power fluctuations), and have emergency cooling systems (ECCS) considered grossly inadequate by Western safety standards. The reactor involved in the Chernobyl disaster was an RBMK.
RBMK emergency core cooling systems only have one division and little redundancy within that division. Though the large core of the RBMK is less energy-dense than the smaller Western LWR core, it is harder to cool. The RBMK is moderated by graphite. In the presence of both steam and oxygen at high temperatures, graphite forms synthesis gas and with the water gas shift reaction, the resultant hydrogen burns explosively. If oxygen contacts hot graphite, it will burn. Control rods used to be tipped with graphite, a material that slows neutrons and thus speeds up the chain reaction. Water is used as a coolant, but not a moderator. If the water boils away, cooling is lost, but moderation continues. This is termed a positive void coefficient of reactivity.
The RBMK tends towards dangerous power fluctuations. Control rods can become stuck if the reactor suddenly heats up and they are moving. Xenon-135, a neutron absorbent fission product, has a tendency to build up in the core and burn off unpredictably in the event of low power operation. This can lead to inaccurate neutronic and thermal power ratings.
The RBMK does not have any containment above the core. The only substantial solid barrier above the fuel is the upper part of the core, called the upper biological shield, which is a piece of concrete interpenetrated with control rods and with access holes for refueling while online. Other parts of the RBMK were shielded better than the core itself. Rapid shutdown (SCRAM) takes 10 to 15 seconds. Western reactors take 1 - 2.5 seconds.
Western aid has been given to provide certain real-time safety monitoring capacities to the operating staff. Whether this extends to automatic initiation of emergency cooling is not known. Training has been provided in safety assessment from Western sources, and Russian reactors have evolved in response to the weaknesses that were in the RBMK. Nonetheless, numerous RBMKs still operate.
Though it might be possible to stop a loss-of-coolant event prior to core damage occurring, any core damage incidents will probably allow massive release of radioactive materials.
Upon entering the EU in 2004, Lithuania was required to phase out its two RBMKs at Ignalina NPP, deemed totally incompatible with European nuclear safety standards. The country planned to replace them with safer reactors at Visaginas Nuclear Power Plant.
MKER[edit]
The MKER is a modern Russian-engineered channel type reactor that is a distant descendant of the RBMK, designed to optimize the benefits and fix the serious flaws of the original.
Several unique features of the MKER's design make it a credible and interesting option. The reactor remains online during refueling, ensuring outages only occasionally for maintenance, with uptime up to 97-99%. The moderator design allows the use of less-enriched fuels, with a high burnup rate. Neutronics characteristics have been optimized for civilian use, for superior fuel fertilization and recycling; and graphite moderation achieves better neutronics than is possible with light water moderation. The lower power density of the core greatly enhances thermal regulation.
An array of improvements make the MKER's safety comparable to Western Generation III reactors: improved quality of parts, advanced computer controls, comprehensive passive emergency core cooling system, and very strong containment structure, along with a negative void coefficient and a fast-acting rapid shutdown system. The passive emergency cooling system uses reliable natural phenomena to cool the core, rather than depending on motor-driven pumps. The containment structure is designed to withstand severe stress and pressure. In the event of a pipe break of a cooling-water channel, the channel can be isolated from the water supply, preventing a general failure.
The greatly enhanced safety and unique benefits of the MKER design enhance its competitiveness in countries considering full fuel-cycle options for nuclear development.
VVER[edit]
The VVER is a pressurized light-water reactor that is far more stable and safe than the RBMK. This is because it uses light water as a moderator (rather than graphite), has well-understood operating characteristics, and has a negative void coefficient of reactivity. In addition, some have been built with more than marginal containments, some have quality ECCS systems, and some have been upgraded to international standards of control and instrumentation. Present generations of VVERs (starting from the VVER-1000) are built to Western-equivalent levels of instrumentation, control, and containment systems.
Even with these positive developments, however, certain older VVER models raise a high level of concern, especially the VVER-440 V230.[23]
The VVER-440 V230 has no containment building, but only has a structure capable of confining steam surrounding the RPV. This is a volume of thin steel, perhaps 1–2 inches (2.5–5.1 cm) in thickness, grossly insufficient by Western standards.
Effects[edit]
The effects of a nuclear meltdown depend on the safety features designed into a reactor. A modern reactor is designed both to make a meltdown unlikely, and to contain one should it occur.
In a modern reactor, a nuclear meltdown, whether partial or total, should be contained inside the reactor's containment structure. Thus (assuming that no other major disasters occur) while the meltdown will severely damage the reactor itself, possibly contaminating the whole structure with highly radioactive material, a meltdown alone should not lead to significant radioactivity release or danger to the public.[24]
A nuclear meltdown may be part of a chain of disasters. For example, in the Chernobyl accident, by the time the core melted, there had already been a large steam explosion and graphite fire, and a major release of radioactive contamination. Prior to a meltdown, operators may reduce pressure in the reactor by releasing radioactive steam to the environment. This would allow fresh cooling water to be injected with the intent of preventing a meltdown.
Reactor design[edit]
Although pressurized water reactors are more susceptible to nuclear meltdown in the absence of active safety measures, this is not a universal feature of civilian nuclear reactors. Much of the research in civilian nuclear reactors is for designs with passive nuclear safety features that may be less susceptible to meltdown, even if all emergency systems failed. For example, pebble bed reactors are designed so that complete loss of coolant for an indefinite period does not result in the reactor overheating. The General Electric ESBWR and Westinghouse AP1000 have passively activated safety systems. The CANDU reactor has two low-temperature and low-pressure water systems surrounding the fuel (i.e. moderator and shield tank) that act as back-up heat sinks and preclude meltdowns and core-breaching scenarios.[21] Liquid fueled reactors can be stopped by draining the fuel into tankage, which not only prevents further fission but draws decay heat away statically, and by drawing off the fission products (which are the source of post-shutdown heating) incrementally. The ideal is to have reactors that fail-safe through physics rather than through redundant safety systems or human intervention.
Certain fast breeder reactor designs may be more susceptible to meltdown than other reactor types, due to their larger quantity of fissile material and the higher neutron flux inside the reactor core. Other reactor designs, such as Integral Fast Reactor model EBR II,[25] had been explicitly engineered to be meltdown-immune. It was tested in April 1986, just before the Chernobyl failure, to simulate loss of coolant pumping power, by switching off the power to the primary pumps. As designed, it shut itself down, in about 300 seconds, as soon as the temperature rose to a point designed as higher than proper operation would require. This was well below the boiling point of the unpressurised liquid metal coolant, which had entirely sufficient cooling ability to deal with the heat of fission product radioactivity, by simple convection.
The second test, deliberate shut-off of the secondary coolant loop that supplies the generators, caused the primary circuit to undergo the same safe shutdown. This test simulated the case of a water-cooled reactor losing its steam turbine circuit, perhaps by a leak.