Explosion in a chemical plant

The incident occurred at a silane production plant. A ‘neutralization container’, part of the "Contact Mass Preparation" process unit, exploded. The bursting was caused by the accidental production of hydrogen, causing an over-pressurisation and failure of the tank, the release of hydrogen and a second explosion following ignition. The explosion caused significant property damage (plant equipment, buildings), but no serious personal injuries.

The production of hydrogen was due to an overdose of caustic soda in a silicon dust suspension tank, which caused its pH value to increase beyond a value of 11. This allowed a large amount of hydrogen to evolve in a very short time.

The INITATING CAUSE was the accidental production of hydrogen from a run-away reaction.
There was no interlock which could have prevented the run-away reaction. The plant had been designed to operate on a manual basis. The pH probe was not used as a risk-monitoring tool. On top of that, the personnel forgot to activate the probe, probably due to malfunctioning of process components, catching their whole attention.
The ROOT CAUSE was a lack of proper risk assessment design and lack of proper personnel training during emergencies.

silicon dust container

The process conditions were: alkaline solution with Si sludge,
pressure <= 300 mb, temp. approx. 50° C

Two people with minor injuries were taken to hospital (ZEMA mentions only 1).
Damage to adjacent buildings, to cars in surrounding area.
Damage outside of plant: Damage to pergola

This incident example of lack of proper process variable monitoring and of interlocks system able to bring automatically the system to a safe state.
In the absences of these, the whole responsibility is shifted to personnel. In case of unexpected (thus not tested, exercised) series of events, the personnel has great difficulty in (i) understanding what is happening, (ii) focussing on the most critical emergency actions required to manage the emergency.

A ‘plausibility check’ was introduced as operative risk assessment tool. for those parts of the system which were not the object of a systematic safety-related testing beyond design and needed to be assessed regarding possible generation of unacceptable energy releases. This check is based on the logical concept that inadmissible energy conditions can occur only if:
(i) energy generated as intended cannot be dissipated,
(ii) energy potentials deactivated as intended are suddenly released,
(iii) or energy is introduced from outside.
Moreover, the company modified the process of ‘contact mass’ processing, particularly the neutralization stage relevant to the event.