HOT WORK EXPLOSION — CORRODED ACID TANK WITH FLAMMABLE VAPORS
Motiva Enterprises Sulfuric Acid Tank Explosion
Motiva Enterprises LLC
📍 Delaware City, DE
Incident: July 17, 2001  •  CSB Report: August 28, 2002
1
Fatalities
Sulfuric Acid (Spent — Tank Farm) / Flammable Vapors in Corroded Tank
Chemical Involved
19
CSB Recommendations
📋 Incident Summary

On July 17, 2001, an explosion occurred at the Motiva Enterprises refinery in Delaware City, Delaware, killing one contract worker and injuring eight others. A work crew had been performing hot work -- welding and other spark-producing operations -- on a catwalk above a sulfuric acid storage tank farm when sparks ignited flammable vapors inside one of the storage tanks. The tank had holes in its roof and shell due to extensive corrosion, which had allowed flammable vapors from the refinery process environment to accumulate inside.

The CSB investigation found that the corroded spent sulfuric acid tank had not been inspected, repaired, or taken out of service despite documented evidence of corrosion holes. Inspection reports had identified the corrosion, but the facility lacked an effective accountability system for acting on mechanical integrity findings. The hot work permit system did not require testing for flammables inside tanks in the vicinity of hot work -- an omission that allowed workers to perform welding above a tank containing an explosive atmosphere.

The CSB issued 19 recommendations to Motiva Delaware City, Motiva Enterprises LLC, OSHA, API, NACE International, building trades unions, and industry associations. Key recommendations addressed mechanical integrity accountability systems, hot work program requirements for flammable monitoring near tanks, tank inerting, and the need for OSHA to extend PSM coverage to atmospheric storage tanks connected to PSM-covered processes.

🔎 Key Findings
Finding 01
Hot Work Above Corroded Tank with Flammable Vapors -- Spark Ignited Explosion
Contract workers performing hot work on a catwalk above the sulfuric acid tank farm ignited flammable vapors inside a corroded tank. The hot work permit did not require testing for flammable vapors inside nearby tanks before hot work began.
Finding 02
Corroded Tank Had Documented Holes in Roof and Shell -- Not Repaired
The spent sulfuric acid tank had corrosion holes in its roof and shell that had been documented in inspection reports. The facility's mechanical integrity program did not have an effective accountability system to ensure that documented inspection findings triggered timely repairs or removal of the tank from service.
Finding 03
Mechanical Integrity Accountability System Was Ineffective
Motiva Delaware City lacked an effective system to ensure that mechanical integrity inspection findings were reviewed by subject matter experts, prioritized for repair, and tracked through to completion. Inspection reports identified the corrosion but did not drive corrective action before the explosion.
Finding 04
Hot Work Permit Did Not Require Flammable Monitoring of Nearby Tanks
The Motiva Delaware City hot work permit program did not require testing for flammable vapors inside storage tanks in the vicinity of hot work operations. This gap allowed hot work to proceed directly above a tank containing an explosive atmosphere without any vapor testing.
Finding 05
Significant Sulfuric Acid Released to Environment -- Regulatory Attention
The tank explosion released a significant volume of sulfuric acid to the environment at the Delaware City refinery, resulting in environmental cleanup and regulatory response in addition to the fatality and injuries.
🔍 Root Causes
1
Mechanical Integrity Program Did Not Ensure Corroded Tank Was Repaired or Removed from Service
The facility's mechanical integrity program had inspection data showing corrosion holes in the tank but lacked an accountability system that would have ensured the documented deficiency was escalated, repaired, or resulted in the tank being taken out of service before hot work was performed above it.
2
Hot Work Permit Program Did Not Address Flammable Vapor Hazard in Adjacent Tanks
The hot work permit program required flammable gas testing in the immediate work area but did not require evaluation of whether nearby storage tanks contained flammable vapors that could reach the work area through corrosion holes or vents -- a critical gap in a refinery environment with multiple tanks in proximity.
3
Management of Change Not Applied to Tank Service Conditions
Changes to tank service and operating conditions -- including changes that could affect inerting requirements and flammable vapor accumulation -- were not subject to formal management of change reviews, leaving the tank's evolving corrosion status outside the formal safety control system.
☑ CSB Recommendations
→ Motiva Enterprises - Delaware City Refinery
Implement an accountability system for mechanical integrity inspection findings including review by subject matter experts, planning for timely repairs, and escalation to higher management if corrective actions are not completed on schedule.
→ Motiva Enterprises - Delaware City Refinery
Revise the hot work program to require continuous or periodic flammable monitoring in areas near storage tanks during hot work; evaluate and install inerting systems where appropriate for tanks that could accumulate flammable vapors.
→ Motiva Enterprises - Delaware City Refinery
Ensure management of change reviews are conducted for changes to tank equipment and operating conditions including inerting and venting systems; upgrade the Unsafe Condition Report system with designated management authority and escalation mechanisms.
→ Motiva Enterprises LLC (corporate)
Conduct periodic audits of storage tank mechanical integrity, hot work programs, MOC, and accountability systems at all Motiva refineries; track and implement audit recommendations and share findings with the workforce.
→ American Petroleum Institute (API)
Develop guidance to inspect H2SO4 storage tanks per NACE RP 0294-94 frequency standards; revise API tank inspection standards to designate tanks with roof or shell holes as an imminent hazard requiring immediate repair or removal from service; address tank inerting for flammable service.
→ Occupational Safety and Health Administration (OSHA)
Ensure PSM coverage of atmospheric storage tanks that could be involved in a potential catastrophic release as a result of being interconnected to a covered PSM process containing 10,000+ pounds of a flammable substance.
→ NACE International
Work with API to develop guidance ensuring H2SO4 tanks are inspected per NACE RP 0294-94 frequency requirements; communicate the report's findings to membership.
→ Building and Construction Trades Dept, AFL-CIO; PACE Union; National Petrochemical and Refiners Association
Communicate the findings and recommendations of this report to all members working in or around facilities with storage tanks in flammable or corrosive service.
💡 Lessons Learned
Corrosion holes in a storage tank are an imminent hazard -- not a future maintenance item. A tank with holes in its roof or shell is no longer a closed system. Flammable vapors from the surrounding process environment can enter through those holes and accumulate inside the tank. Any nearby hot work then operates directly above a potential explosion. Documented corrosion findings must trigger immediate action, not scheduling for the next turnaround.
Hot work permits must evaluate not just the immediate work area but the entire zone of potential flammable vapor accumulation. In a refinery or chemical plant with tanks in the vicinity, the question is not only 'is there gas in the air where we are working?' but also 'is there gas inside any nearby vessel or tank that could be reached by sparks or flames?' Hot work above a tank requires knowing what is inside the tank.
A mechanical integrity program that documents deficiencies but does not ensure they are corrected is not a functioning MI program. Inspection data is only valuable if it drives action. The accountability system must include designated owners for each finding, timelines for correction, and escalation to management when corrective actions are not completed on schedule.
Tank inerting is a critical safeguard against vapor accumulation in tanks that may be exposed to flammable process environments. Spent sulfuric acid tanks at refineries may be in close proximity to hydrocarbon processes, and flammable vapors can reach the tank interior through corrosion damage to the tank enclosure. Inerting systems eliminate the flammable vapor hazard regardless of what vapors are present in the surrounding environment.
OSHA PSM's regulatory boundary at the process unit fence line can leave adjacent atmospheric storage tanks outside formal PSM coverage, even when those tanks are directly connected to PSM-covered processes. The Motiva case resulted in a CSB recommendation to OSHA to extend PSM coverage to such tanks -- a recommendation that remained open for decades and was eventually superseded by a similar recommendation from the ITC tank fire investigation.
HOW: Hot Work / Safe Work PracticesMI: Mechanical IntegrityMOC: Management of Change
🔨 Safety Meeting Toolbox Talk
►When hot work is planned near storage tanks at your facility, does the hot work permit require testing for flammable vapors inside those tanks -- not just in the open air of the work area?
►Is there an open mechanical integrity inspection finding on any storage tank at your facility that documents corrosion holes, thinning, or structural deficiency? What is the status of the corrective action? Who is accountable for closing it?
►Are storage tanks in flammable process environments at your facility equipped with inerting systems? Have those systems been evaluated for adequacy and tested recently?
►How does your facility's mechanical integrity program escalate overdue inspection findings to management? Is there a formal process for identifying and escalating critical MI deficiencies that have not been corrected on schedule?
►Does your hot work permit system specifically address hot work above or adjacent to storage tanks? Is testing of the tank interior (not just the ambient air) a required step?
Immediate Action Items
✓Pull the open mechanical integrity inspection findings list for your facility and identify any storage tanks with documented corrosion, holes, or structural deficiencies -- schedule immediate engineering review and corrective action for any with a safety-critical consequence.
✓Review your hot work permit procedure and confirm it requires flammable vapor monitoring of nearby tank interiors (not just the open work environment) when hot work is performed above or adjacent to storage tanks in flammable or process service.
✓Evaluate whether atmospheric storage tanks connected to or adjacent to your PSM-covered process units are covered by your PSM program and mechanical integrity inspection requirements, or whether they fall outside formal PSM scope.
✓Verify that storage tanks in flammable process environments are equipped with functioning inerting systems, and confirm the inerting systems are included in your mechanical integrity inspection schedule.
✓Establish a formal escalation process for overdue MI inspection findings -- specifically assigning a manager accountable for each critical finding and requiring management notification if corrective action is not completed within the scheduled window.
🔗 PSM Failures Behind This Incident

This incident traced to breakdowns across 3 PSM elements (HOW · MI · MOC). Each represents a documented gap that process safety documentation and consulting can close before a similar event occurs at your facility.

Hot Work Permits
Unauthorized or poorly controlled ignition sources near flammable atmospheres are entirely preventable. A rigorous hot work permit system with pre-job atmospheric testing closes this pathway.
Supporting documents in our library →
Mechanical Integrity (MI)
Equipment must be designed, inspected, and maintained to operate safely in its intended service. Mechanical integrity failures — degraded equipment, missed inspections, deferred repairs — contributed to loss of containment here.
Supporting documents in our library →
Management of Change (MOC)
Changes to equipment, chemistry, operating limits, or procedures that bypass formal review create new hazard pathways your PHA never evaluated. MOC failures open the door to incidents like this one.
Supporting documents in our library →
Process Safety Management Consulting & Document Library
📂
PSM Document Library
32 ready-to-deploy PSM documents covering all 14 OSHA elements — procedures, checklists, and audit templates built for facilities operating under 29 CFR 1910.119.
Browse the Library →
📊
Free PSM Health Score
Find out where your PSM program stands across all 14 OSHA elements. Our free health score surfaces your biggest gaps in under 10 minutes — no account required.
Check Your Score →
📞
Consulting Services
PHA facilitation, PSM program builds, compliance audits, and OSHA inspection support. Transparent flat-fee pricing — no retainer required to get started.
View Pricing →
📋 Explore the full incident library: All 132 CSB Case Studies →