Advocates suggest that fusion reactors are safer than fission reactors, sometimes claiming that fusion is intrinsically safe and fission is intrinsically unsafe. This page discusses the safety situation at fusion reactors pointing out that they certainly have dangers. In reality, the most serious risk for both fission and fusion reactors is a loss of coolant followed by a hydrogen explosion.
Because of the importance of these issues, this page is long and detailed with several sections. The first section compares Safety in fusion compared to fission reactors. Next there is a section presenting some Published analyses of fusion safety with a catalogue of risks taken from these publications. This is followed by a presentation of some Examples of specific safety risks which illustrate the risks coming from the complexity of fusion power plants. A section Safety concerns of nuclear regulator for ITER emphasises the construction hold put on the international ITER reactor since February 2022 by the French Autorité de Sûreté (ASN) which can be taken as an illustration of serious concerns for the safety of fusion reactors. Despite all this, there is a move to relax safety regulations in fusion reactors compared to fission, this is discussed in the section Proposals to modify regulations for fusion reactors. Finally, there is a Conclusion on safety in fusion reactors.
In mainstream fusion devices, the fusion reaction in the plasma relies on continual fueling with frozen pellets of deuterium-tritium and continual heating with devices external to the plasma. Once these mechanisms stop there is no chance of the fusion reactions continuing. For fission, since the China Syndrome Film in 1979, there have been popular fears that the cores of nuclear fission reactor could meltdown and burn through the Earth. In reality, there have never been any fission meltdown run-away accidents. All Three Infamous Nuclear Accidents, started with loss of coolant incidents, leading to subsequent melt-down consequences for the cores, but not initiated by core run-away. In all these accidents, overheating after the loss of coolant incidents, caused hydrogen production and explosions. The paper of Wu et al., compares safety concerns in fusion reactors with fission reactors. The cartoon below, from this paper, illustrates the sequence of events which led to the hydrogen explosions in the fission reactors at Fukushima.
Schematic of Fukushima nuclear accident. a) nuclear plants have backup power. b) If all power is lost, loss of cooling pumps causes fuel temperature to rise. c) If temperature rise is large enough, fuel begins to melt, resulting in core and pressure vessel damage. d) Hydrogen is released from chemical reactions between water and hot fuel, leading to explosions and releasing radioactive materials to the atmosphere.
Hydrogen explosions at fusion reactors would have different initiators than fission but could lead to similar radioactive contamination of the surrounding environment. For fission, the risk is with the hot reactor core and with fusion, the main risk is with the hot breeder blankets. Both reactor types contain large quantities of radioactive material, and a fusion reactor would actually have higher levels of short-lived radioactivity ejected than a fission reactor. For either reactor type, an explosive discharge of materials could be devastating and so like modern fission reactors, fusion reactors will have massive containment vessels, called Bioshield, to prevent any escapes to the environment.
DEMO containment structure, Bioshield, around tokamak.
The same Wu et al. paper gives the table below indicating the main accidents considered for fission and fusion power plants, showing that nearly all accident conditions for fission reactors are also present for fusion reactors. Further, fusion actually has more possible accident conditions due to the multiple, complex, associated systems.
A prospective on safety in fusion reactors is given in the paper, Perrault, an IRSN safety engineer. Further papers by Taylor et al., and by Lukas and Williams, point out many concerns. Below is a partial list of risks presented in these papers:
Nuclear facilities evaluate accidents in classifications of Design-Basis Accident and Beyond Design-Basis Accidents, where a Design-Basic Accident is defined as: "A postulated accident that a nuclear facility must be designed and built to withstand without loss to the systems, structures, and components necessary to ensure public health and safety". With these classifications, the list of accidents considered for ITER, is presented below, taken from Nuclear Fusion Reactors by IRSN.
Dose, mSv at 2.5 km
|Water ingress into vacuum vessel (VV)||10-4|
|Air ingress into VV||10-2|
|VV primary cooling system (PCS) leak outside VV||10-5|
|Divertor primary cooling system leak outside VV||2 10-2|
|Leak in isotope separation system||10-4|
|Failure of fueling line||5 10-3|
|Loss of confinement in hot cell building||4 10-4|
|Leak from a triated water tank||2 10-2|
|Loss of confinement on transfer cask||4 10-3|
|Failure of largest opening glove box||3 10-5|
Beyond Design-Basis Accident
|Air ingress into VV + failure of VV penetration||4 10-3|
|Water ingress into VV + failure of VV penetration||0.1|
|Loss of plasma without fusion shutdown + water in VV||3 10-5|
|Blanket PCS leak outside VV without fusion shutdown||2 10-2|
|Air ingress into VV causing explosion||0.2|
|Significant breach of VV and cryostat||0.3|
|VV PCS outside VV + loss of other coolant||4 10-4|
|Water and helium leaks into cryostat||2 10-3|
|Failure of fuelling line + failure of detritiation||0.2|
|Fire in tritium building||0.2|
|Leak from isotope separation system + explosion||0.1|
|Fire in waste treatment area propagating to storage||0.3|
|Tritium explosion during regeneration of a VV cryopump||0.3|
List of accidents considered by ITER with the corresponding radioactive release to the environment. The worst accidents are in the "Beyond Design-Basis" category.
In this evaluation of radiation escape to the environment, only Beyond Design-Basis accidents with multiple events or explosions and fires give significant contaminations at 2.5 km from the site. Clearly personnel on site would receive a higher dose.
Tokamak breeder blankets, discussed in some detail in the page Breeder Blanket, present a large range of serious safety risks because of the enormous high energy neutron flux they receive, the volatile and toxic material they contain and the complex cooling system that must remove the heat generated in them. Loss of coolant accidents are a major risk for the breeder blanket. The picture shows the cooling system for the DEMO Helium Cooled Pebble Bed breeder blanket option. The 80 independent breeder blanket modules require an enormous network of cooling pipes and heat exchangers. Because of the consequences of losing cooling, each blanket module has redundant cooling circuits.
Complex cooling system for DEMO breeder blankets
Any coolant loss must instantly stop fusion operations and a failure in the trip system would be instantly dramatic. Once the fusion operations stop, the problem is decay heat from the material made radioactive by neutron activation. The plasma facing surfaces are tungsten and have the largest decay heating, around 325 W/kg. The structural parts are usually Eurofer steel and have decay heating of about 100 W/kg. Due to their large size, the total decay heat load in the breeder blanket would be around 5 MW per module. Calculations show that the first wall of the breeder blanket would reach 1200°C after 10 days if no cooling is restored. While these temperatures are not high enough to melt the metal structures, there are serious concerns as to the fate of the materials inside the modules. The beryllium and lithium contents have gigantic risks to health and safety. Beryllium exposure is well known to cause Berylliosis an acute and sometimes deadly lung disease. Lithium fires are becoming notoriously difficult to extinguish in battery storage farms and electric vehicles. Structures at 1200°C containing many tonnes of each seem to present a very large safety risk.
Remote maintenance for DEMO is discussed in the page, Maintenance, Breakdowns and Availability, and the operations on the blanket modules represent the biggest task. The breeder blanket modules, 15 metres high and weighing 80 tonnes, will be regularly replaced about once every 4 years, due to radiation damage. On removal, their radiation levels would give a person in proximity a lethal dose within 10 seconds, hence the whole operation must be performed completely remotely. The schematic below indicates the complex operation: extraction from the vacuum vessel; insertion into a transport cask and transfer to the Active Maintenance Facility (AMF). The modules are then removed from the casks and stored in hot cells after a bake-out process at 900°C to ensure the release of any tritium which has permeated into the materials. After allowing a period for the radioactivity to diminish by decay, the module will be disassembled and the materials recycled, in operations which are expected to require between 6 and 12 years in the AMF. The possibility of machinery breakdown is this complex process is already envisaged and the recovery from such a failure would require another remote operation. Any human intervention is clearly excluded for decades.
Schematic of the transfer of a breeder blanket module in a cask to the AMF.
The tokamak building, shown in the figure below, houses the tokamak and numerous plant systems. The building complex has extensive safety precautions, including a cylindrical containment vessel, bioshield, of 2m thickness with requirements to limit the release of radioactive substances during normal operation and in accident situations. The buildings are designed to withstand and contain the following possible accidents: seismic events; airplane crash; release of tritium or activated corrosion products; contamination with radioactive substances; neutron and/or gamma radiation emitted from cooling water systems and lithium lead piping; fire, explosion or flooding.
DEMO Tokamak building level complex, showing one lower floor
By necessity of size, some plant is located outside the bioshield and fluids are transported through the bioshield to these locations. The water-cooling systems are in this category and present significant radiation hazards to personnel. Neutron activation of cooling water inside the tokamak is a major issue because the high flux of fusion neutrons from fusion causes activation of oxygen in the water to produce short-lived isotopes of nitrogen: 16N (half-life 7 s) and 17N (half-life 4 s). With the high water flows, the highly radioactive water passes out of the bioshield and into the surrounding rooms before these nitrogen isotopes decay. The neutron decay from the 17N, in turn causes activation in the steel pipes in the primary heat transfer system in these areas shown in the figure below.
Primary Heat Transfer System equipment rooms for breeder blanket
The table below, taken from the paper by Gliss et al., gives examples of the occupational radiation exposure in rooms related to the water-cooling system. Some locations would rapidly give a lethal radiation dose (5 Sv) to personnel, other locations give the yearly allowed dose (20mSv).
The paper Terranova et al., calculates the radioactive deposits which would appear in the maintenance of the heat exchanger of the divertor cooling system. This reports an activity, at the end of operations, giving levels for several radioisotopes including, 36 GBq from 60Co (half-life 5 y) and 5 TBq from 55Fe (half-life 3 y), originating from activation of iron in the cooling circuit. The 60Co level is at the level of dangerous to the quality of life.
Dust particles are produced in tokamaks by interactions of the energetic plasma with surfaces. The images below, from Sharpe et al., show dust particles with sizes between 0.1 and 10 micrometres (μm).
Scanning electron microscope images of dust particles from fusion devices
Examples of melt zones in JET in configuration with ITER-like Walls.
A surprisingly large mass of dust is expected to be produced in fusion devices. Mazzini et al. estimate DEMO will produce 1000 kg/ year of tungsten dust from normal operations with the possibility of between 4 and 460 kg of dust in certain individual disruption events. A consequence of this amount of metallic dust is that a significant quantity of tritium will be trapped in the dust particles. Mazzini et al. estimate this could be a few kg which is much greater than the few grams of tritium normally injected into the device for fusion reactions. This large amount of dust presents a range of hazards because of its radioactivity, chemical reactivity and chemical toxicity. The dust could also present complications to the normal operation of the fusion reactor. To initiate a chemical explosion there must be both a source of ignition energy and a source of oxygen to feed the reactions. A worst-case scenario is that of a massive water leak onto hot dust with a pressure build-up and an explosion of the released hydrogen. A loss of vacuum and air ingress into the vacuum vessel could also lead to ignition.
Hydrogen is classified among the “extremely flammable” substances as shown by its properties compared with methane and petrol in the table below which is taken from the report ARIA: Accidentology involving hydrogen.
Flammability properties of hydrogen compared to methane and petrol
The main physico-chemical properties of hydrogen include: low molar mass and small size giving it a high tendency to leak extreme flammability and low ignition energy; ability to embrittle metals and alloys by altering their mechanical properties; violent reactions with certain compounds due to its reducing properties. In the form of the heavy isotopes deuterium and tritium, hydrogen is the fuel of mainstream reactors. Although the amounts inside the fusion reactor are relatively small and the total inventory on site is limited, hydrogen explosions are a significant risk. As discussed already above, for both fission and fusion reactors, hydrogen explosions are a major accident risk. The ARIA report discusses 215 examples of industrial accidents and of these 5 are in the nuclear industry as shown in the table below.
Industrial activities involved in hydrogen accidents discussed in the ARIA report
In fission reactors, the hydrogen generation is activated by the core material water reactions (e.g., with zirconium cladding, steel from supporting structures and boron carbide control rods). The images below show the Fukushima accident in 2011 caused by a tsunami and resulting in a hydrogen explosion.
Hydrogen explosion at Fukushima Daiichi nuclear fission power plant following an earthquake and tsunami. The hydrogens from steam in the hot reactor core.
In fusion reactors the fuel, tritium, is a hydrogen isotope and also hydrogen could be produced in similar ways as in fission reactors with oxidation reactions between water/ steam and plasma facing components or hot dust. In fusion power plants, hydrogen explosion risks exist in the tokamak vacuum vessel but also in the tritium plant buildings and the waste handling buildings. Mitigation plans are being developed for all areas. The bioshields are being designed to contain all possible explosions inside the power plant and to avoid any escape of radioactivity to the surrounding environment. The doubts about the ITER bioshield are among the reasons for the construction stop from ASN which is discussed below. Studies of methods of mitigate the risk of hydrogen explosions in fusion facilities are in progress. Methods include passive autocatalytic recombiners has which come into action spontaneously as soon as the hydrogen concentration increases and are standard in fission reactor confinement regions. Another method is the injection of non-reactive CO2 into the vacuum vessel as soon as an air leak is detected. Most of the serious accident in the list of accidents above, involve hydrogen explosions.
The French Autorité de Sûreté Nucléaire (ASN) refused, in Jan 2022, to release a "Hold Point" on the assembly of the ITER Tokamak, stopping any activities which could not be reversed and stalling the tokamak assembly for at least 10 months. The New Energy Times website explains the situation in a post: French Regulator Halts Assembly of ITER Reactor. In order to lift the hold, the ASN (ASN: CODEP-DRC-2022-000845.) requires the following actions:
Clarification of radiological maps and sizing of biological shielding
"The neutron budget values that you predict during the operation of the installation are greater than the maximum neutron fluence taken into account for the sizing of the installation. The information submitted concerning the radiological maps does not make it possible to demonstrate the control of the limitation of exposure to ionizing radiation, a major challenge for a nuclear fusion installation. In particular, the activation of materials by neutron flux has not been properly taken into account and the exposure of workers in locations adjoining nuclear buildings must be evaluated with realistic assumptions, for the different modes of operation, in order to demonstrate compliance with regulations."
Demonstration of civil engineering structure behaviour under extreme conditions
"To date, the following have not been integrated into the modelling of civil engineering behaviour: The distribution and evolution of the weights related to the design evolutions you have made, especially in recent months, to the installation, and those that you will bring for address the above points. Problems already noted on the installation, such as the detachment of the strip from certain seismic supports. In your modelling of civil engineering behaviour, you have not taken into account certain phenomena, such as the "hard core" level earthquake or specific loading combinations (for example, the combination of heat loading and overpressures related to a release total helium)."
Assessment of fission products due to natural impurities in beryllium
"You have reported significant uncertainties regarding the quantity of fission products that can be mobilized in an accident situation, which has consequences, not yet evaluated, on the control of risks associated with dust generation, containment system design and effectiveness dynamics and detritiation, as well as, more generally, concerning normal and accidental installation (discharges, waste, etc.). These topics could lead to changes in design of systems associated with the vacuum chamber, affecting masses and durability civil engineering."
Welding strategy to overcome geometrical non-conformities of welding bevels of the delivered vacuum vessel sectors
"The first two sectors of the vacuum chamber received on site are affected by dimensional non-conformities. As a result, the adequacy of the methodologies you are currently considering for the realization and control of these welds is not guaranteed."
These points express concern with several aspects of safety at ITER. The situation clearly proves that safety is not straightforward for fusion power stations.
There are studies underway to see if safety regulations for fusion power plants should be different from those in place for fission power plants. The European Commision has published a report on this issue: Exploring Regulatory Options for Fusion Power Plants. The new private fusion energy companies which are described in the section: Alternative Approaches, have a deep interest to avoid interventions such as the ASN ITER construction hold for their projects, hence they are lobbying hard for different regulation for the fusion industry compared to the fission industry.
Open literature does not give any probabilities on the safety risks in nuclear fusion power stations. This page has catalogued examples of risks but without the possibility of any quantitively risk analysis. The following conclusions of fusion safety can be made: