The Incident : 26 April 2018 Location : “Husky Superior Refinery”, Superior, Wisconsin, US at FCC Unit 05:40hrs Unit taken into Shutdown for Repair and maintenance 1 2 10:00hrs Explosion occurs in Gascon section due to explosive hydrocarbon-air mixture 3 12:00hrs Secondary asphalt fire ignited after metallic debris punctured storage tank Late Evening Fire fully extinguished after extensive emergency response efforts 4 36 Injuries Personnel affected with no fatalities $110 M Offsite damage Community and Environmental impact Summery of incident $550 M Onsite damage Direct repair cost
Damage Assessment impact The primary explosion in the Gascon section's absorber towers created a cascading series of events. The force was sufficient to launch heavy metallic debris across significant distances, ultimately causing secondary damage to critical storage infrastructure. This demonstrates how initial process upsets can rapidly escalate into major incidents when multiple safety barriers fail simultaneously.
Tank Penetration Metallic debris punctured the storage tank shell, creating an immediate release pathway for 2400 KL of hot asphalt material. Ignition Source Hot surfaces and potential electrical equipment provided ignition for the massive secondary fire that developed hours after the initial explosion. The secondary fire proved more challenging to extinguish than the initial explosion, requiring specialized foam application and extended emergency response efforts throughout the evening hours. Secondary Fire: Asphalt Storage Tank Failure
Chronology of the events
Chronology of the events Unit Feed out. Feed to riser introduced RCSV closed at 05:45 SCSV Closed MAB and Auxiliary air blower was kept rolling to cool down the catalyst Riser steam was reduced to 85%. The operator observed the catalyst level in reactor was decreasing and SCSV was closed manually. Reactor catalyst level was showing nil. Operator assumed it is false indication however in actual SCSV was later found badly passing due to erosion. MAB Stopped. Only Auxiliary air blower kept running Regenerator Pressure lower than reactor Pressure. Air pressure increased Explosion in Primary and sponge Absorbers. Puncture in Hot Asphalt tank 05:40hrs 05:45hrs 05:48hrs 05:58hrs 06:05hrs 06:05hrs 09:09hrs 09:14hrs 09:58hrs 12:00hrs Late evening Fire brought under control Spilled Asphalt catches fire probably due ignition source from electrical fittings Timelines
During normal operation, Regenerator is kept at higher pressure than the reactor. In FCC unit, air inside the regenerator is typically separated from flammable hydrocarbon inside the reactor by pressure differences created during catalyst circulation. Reactor section operation RX-RG: Single stage regenerator, Licensor UOP
UOP Designed unit Commissioned in 1960 MF/ Gascon Operation post Feedout Simple PFD of MF Gascon section
The sponge absorber pressure control valve was kept in manual and only opened if pressure goes beyond 175 psi( 12.3 kg/cm2g) Refinery’s shutdown procedure instructed operators to “ always keep the regenerator pressure a couple pounds higher than the reactor pressure ” when closing the spent catalyst slide valve. System Pressure and Flows As per the Husky Oil SOP, following pressure profile was maintained during SD
From Feed out till explosion for ~4 hours, reactor pressure operated at about one psi higher than MF column overhead receiver pressure and regenerator pressure was higher than reactor pressure almost the entire time System Pressure and Flows System Pressure post unit shutdown
Analysis of the incident
1 Slides valves erodes in between every Turnaround beyond accepted range of 1/8” Catalyst level could be not maintained in Reactor Air from Regenerator flowed continuously through SCSV and RCSV for 4 hours Refinery had ability to use fuel gas purge to dilute air in MF Column. Written procedures did not mention this safeguard 2 3 Key Facts- What went Wrong With no hydrocarbons to dilute air, O 2 accumulated in Gascon Section To minimize flaring, WGC planned to remain operating until just before Rx Vapor Blind installation Pyrophoric materials on walls of Primary and Sponge Absorber O2 likely reacted with pyrophoric deposits generating heat and providing ignition source 4 Flammable mixture in Primary and Sponge Absorber ignited, causing the explosion 5
Prior to 2018, during shutdown after steam was introduced into the reactor, some of the MF content vented out directly to atmosphere Due to new pollution control rule of US, venting to atmosphere was stopped during 2018 shutdown Lead to Husky’s practice of running WGC until last minute In previous shutdowns Possible some oxygen entered the Main Column Vented to atmosphere or flare rather than running WGC Key Facts- Procedure in previous Shutdowns
Faulty SOP: RX-RG Pressure profile Reactor and Main Column were connected as per normal Operational philosophy during purge out operation during SD Regenerator pressure maintained higher than Reactor. Steam to Reactor was cut to 85% after feed out. Key Facts- What went Wrong Eroded Slide Valves Due to passing of SCSV and higher Regenerator pressure, Air flowed from Regenerator to Reactor to MF Column Steam condensed in Main column Overhead and air continued to move to Gascon section via the WGC. SOP not as per Licensor Slide valve erosion Overlooked Faulty SOP: MF Purge Refinery had ability to use fuel gas purge to dilute air in MF Column. WGC was kept running without using any FG makeup to ensure 3-5% opening of control valve to flare at all times SOP not defined
HUSKy’s SOP UOP’s SOP Key Facts- What went Wrong
Key Facts- Catastrophic vessel failure after explosion Primary Absorber A-212 Grade B (per UOP spec) Sponge Absorber A-201 Grade B (UOP spec Grade A) Failure was "brittle fracture" Many fragments Since 1967, ASTM recommends A-516/A-515 More ductile material expected to reduce fragmentation risk
Manage FCC Unit Pressures During Transients During startup, standby, and shutdown, FCC reactor must be the highest-pressure Prevents air-hydrocarbon mixing that can lead to explosions Operators must manage pressure and flow control diligently. Avoid Relying on Catalyst Slide Valves for Safety FCC slide valves are not gas-tight. Do not treat them as an independent safety layer. Use pressure management and purge systems for protection Use Steam Barriers and Gas Purges Maintain reactor steam barrier and main column gas purge. These help prevent oxygen ingress and manage vessel pressure differences. Essential during transitions between operating states. Audit Process Safety Information Regularly Even mature procedures can become outdated Conduct periodic audits by subject matter experts (SMEs). Check for alignment with current best practices and industry standards . Lessons Learnt Expand PHAs to Cover Transient Operations Most PHAs focus on normal operation only. Most of the incidents occur during startups & shutdown. Perform targeted PHAs for these critical modes using interdisciplinary teams
CSB Conclusions
CSB Conclusions
CSB Conclusions
CSB Recommednations
Safety Talk on Husky Refinery(US), FCC Explosion and Resultant Asphalt Fire Safety Talk
Reactor Regen section During normal operation, Regenerator is kept at higher pressure than the reactor. In FCC unit, air inside the regenerator is typically separated from flammable hydrocarbon inside the reactor by pressure differences created during catalyst circulation. Post Unit Feed out at 05:40 hrs , steam to riser introduced RCSV and SCSV were closed at 05:45 and 05:48 hrs respectively. MAB was kept rolling to cool down the catalyst Riser steam was reduced to 85% at 05:58 hrs. The operator observed the catalyst level in reactor was decreasing and SCSV was closed manually at 06:05 am. By 06:16 am, the reactor catalyst level was showing nil. Operator assumed it is false indication however in actual SCSV was later found badly passing due to erosion. RX-RG: Single stage regenerator, Licensor UOP
Incident Incident happened on 26 th April’ 2018. FCC unit was taken in shutdown at 05:40 am for periodic M&I Shutdown. Transient conditions during shutting down process allowed mixture of Hydrocarbon and air to form an explosive mixture in Gascon Section. At 10:00 am, an explosion occurred in Gascon section (Primary & Sponge absorbers). Metallic Debris from explosion flew ~60 m and hit a large above ground storage tank and puncturing it. 2400 KL Asphalt from tank overflew the Dyke, which ignited at around 12:15 hrs and caused a secondary massive fire. Fire was doused by late evening. 36 Personals suffered injuries without any fatality. Onsite Damage: USD 550 Million, Offsite Damage: USD .110 Million
Refinery operators followed their written protocol Procedures deviated from UOP (and FCC industry) Key Facts “3. Cut Steam to Riser to 85% open, keep Main Column Receiver Pressure 1 pound lower than the Regenerator pressure.” “4. After 15 minutes of catalyst circulation with steam, close the Regenerated Slide Valve, put on manual control, take Slide Valve off hydraulic control, put on hand-wheel, and close valve.” “5. Close Spent Slide Valve, put it on manual if you haven't already done so.” NOTE : When doing # 5, always keep the regenerator pressure a couple pounds higher than the reactor pressure. You may have to have some catalyst in the reactor stripper to hold a seal across the spent slide valve. A sharp temperature rise in the reactor will indicate a reversal. Excerpt from the shutdown procedure used on the day of the incident. (Credit Husky Superior Refinery with annotations by CSB)