When a Contained Failure Becomes a System Failure
During climb out, a Boeing 737-700 experienced a fan blade failure on the left CFM56-7B engine. Although the containment ring successfully kept the titanium alloy fragments inside the compressor casing, the shockwave and load redistribution caused cowl components to separate, one of which damaged the fuselage. The final NTSB investigation provided critical insights into the limitations of test modeling and reliability management in complex systems.
Root Cause of Failure
The investigation determined that the failure occurred due to low-cycle fatigue (LCF) within the dovetail root of fan blade No. 13. Metallurgical analysis revealed no manufacturing defects or material deviations from the alloy specification. The crack initiated in a zone of high operational stress and propagated over a prolonged period of operation.
When Predictive Models Diverge from Operation
Following the incident, the engine manufacturer re-evaluated fan blade dovetail stresses. It was established that real-world operational stresses during service exceeded the original forecasts. This created conditions for earlier fatigue crack propagation than anticipated during the design phase.
Cascade of Secondary Damage
The blade failure itself did not result in a breach of the protective casing. The containment ring performed its primary function, preventing blade fragments from escaping through the compressor housing. However, the impact caused critical damage to the nacelle structure. A separated fragment of the cowl assembly struck the fuselage, shattering a window and causing rapid decompression.
Limits of Certification Testing
The engine and airframe fully complied with certification requirements for Fan Blade Out (FBO) containment. Nevertheless, the real-world sequence of structural failures differed from the scenarios used during testing. The trajectory of individual cowl fragments under the influence of oncoming airflow led to far more severe consequences than original calculations had assumed.
Crew Response
Following the engine failure and decompression, the flight crew managed multiple emergency factors simultaneously. The investigation noted that under high workload conditions, the pilots correctly prioritized CRM principles, focusing on flight path control and executing an immediate emergency descent to ensure a safe landing.
Engineering Conclusion
This case demonstrates that the reliability of a complex system depends not only on the strength of individual components but on the behavior of the entire structure following a localized failure. Even when a primary protective element (such as the containment ring) functions as intended, secondary effects can evolve through unmodelled scenarios.
Measurable Results
- Primary Failure Low-cycle fatigue (LCF) of the engine fan blade
- Secondary Effect Structural failure of cowl components and fuselage decompression
- Discrepancy The real-world cowl failure cascade deviated from FBO certification test conditions
- Crew Performance Safe execution of emergency descent and landing
- Key Lesson Successful completion of certification testing does not preclude the emergence of new failure modes in real-world operations