Fault for the Chernobyl disaster has been assigned and reassigned over the decades since April 26, 1986. The Soviet government initially blamed the operators in the control room. A later international investigation shifted much of the responsibility to fundamental design flaws in the reactor itself. The full picture involves failures at every level: a dangerous reactor design that Soviet authorities knew about, a management culture that pressured workers to complete a flawed safety test, and specific decisions made by individuals in the control room that night.
The Soviet Government Blamed the Operators
Within months of the disaster, Soviet authorities pointed the finger squarely at the men running Unit 4. A trial took place from July 7 to 30, 1987, in a temporary courtroom set up in the city of Chernobyl. Six people were convicted. Anatoly Dyatlov, the deputy chief engineer who supervised the fateful safety test, was found guilty of “criminal mismanagement of potentially explosive enterprises” and sentenced to ten years in a labor camp. He served three. Viktor Bryukhanov, the plant director, and Nikolai Fomin, the chief engineer, each received ten-year sentences as well. Three others received shorter terms: shift director Boris Rogozhin got five years, reactor chief Aleksandr Kovalenko got three, and a state nuclear safety inspector named Yuri Laushkin received two.
This framing served the Soviet system well. Blaming a handful of individuals avoided uncomfortable questions about the reactor design, which was used across the USSR. It also shielded the political and scientific leadership that had approved and promoted the RBMK reactor program for decades.
What the Operators Actually Did
The operators were not blameless. They were conducting a test to see whether the reactor’s turbines could generate enough electricity during a power outage to keep coolant pumps running until backup diesel generators kicked in. In the course of running that test, they committed a series of serious violations.
They deviated from the approved test procedures and from established administrative rules. They raised control rods beyond their allowed limits, violating the requirement to keep enough rods inserted for an effective emergency shutdown. They activated extra coolant pumps while others were already running, creating abnormally high water flow through the core and violating limits designed to prevent pump damage. When these conditions would have triggered an automatic shutdown, the operators intervened and disabled the safety system. They also defeated the automatic reactor trip that was supposed to activate when the turbine stop valve closed, because they wanted the option to rerun the test if the first attempt failed.
Earlier in the test, a junior reactor operator named Leonid Toptunov had accidentally reduced power to about 30 megawatts, far below the 700 megawatt minimum specified for the test. At that dangerously low power level, the reactor became poisoned with a neutron-absorbing byproduct that made it increasingly unstable. Dyatlov pushed the team to continue. When the test was finally completed, Toptunov pressed the AZ-5 emergency shutdown button. What happened next was not what anyone in the room expected.
A Reactor Designed to Explode
The AZ-5 button was supposed to save the reactor. Instead, it destroyed it, because of two critical design flaws that the operators had not been told about.
The first was the positive void coefficient. In the RBMK reactor design, water served as a coolant but also absorbed neutrons, which helped keep the nuclear reaction in check. When that water turned to steam (forming “voids”), fewer neutrons were absorbed, and the reactor’s power output increased. In plain terms: the hotter the reactor got, the more powerful it became. This is the opposite of how most Western reactor designs behave, where losing coolant slows the reaction down. At low power, this instability was especially pronounced.
The second flaw was in the control rods themselves. The rods were designed to absorb neutrons and slow the reaction when inserted into the reactor core. But each rod had a graphite tip at its lower end. Graphite does the opposite of absorbing neutrons; it accelerates the chain reaction. When the operators pressed AZ-5 and all the control rods began descending into the core simultaneously, those graphite tips entered first, displacing water at the bottom of the channels. For a few critical seconds, instead of slowing the reaction, the emergency shutdown actually sped it up. The power surged to roughly 100 times the reactor’s normal maximum output in a matter of seconds. The fuel disintegrated, steam pressure blew the 1,000-ton reactor lid off the building, and a second explosion scattered burning graphite and radioactive material into the atmosphere.
The 1992 Report That Changed the Story
The International Atomic Energy Agency initially accepted much of the Soviet narrative blaming the operators. But by 1992, a revised assessment known as INSAG-7 told a different story. The updated report was, in its own words, “less critical of the operators,” shifting emphasis toward “the contributions of particular design features, including the design of the control rods and safety systems, and arrangements for presenting important safety information to the operators.”
The INSAG-7 report concluded that the accident resulted from three factors working together: the physical characteristics of the RBMK reactor that made it unstable at low power, the specific design of the control rods with their graphite tips, and the fact that the reactor had been brought to a state that was never analyzed by any independent safety body and was not covered by operating procedures. In other words, the operators drove the reactor into dangerous territory, but no one had told them the territory existed, and the emergency systems designed to protect them made things worse.
The System Behind the Individuals
Zooming out further, the design flaws in the RBMK reactor were not unknown to Soviet nuclear scientists. The positive void coefficient had been identified before Chernobyl, and a similar (though less catastrophic) incident had occurred at the Leningrad nuclear plant in 1975. But information about these risks was restricted. Operators at Chernobyl were not given full technical documentation about the reactor’s behavior at low power. The safety culture of the Soviet nuclear industry prioritized production targets and secrecy over transparency with the people actually running the machines.
Dyatlov, who bore the heaviest individual blame, spent the rest of his life arguing that the reactor’s designers and the officials who approved its flawed safety systems were the true culprits. He acknowledged that rules were broken during the test but maintained that the operators had no way of knowing that pressing the emergency shutdown button could trigger an explosion. He died in 1995 from heart failure, his health wrecked by the radiation dose he received that night.
Where Fault Actually Lies
The most honest answer is that Chernobyl was a failure distributed across an entire system. The reactor designers created a machine with a fatal flaw and then compounded it with control rods that could cause a power spike during an emergency shutdown. Soviet regulatory bodies failed to require fixes or to ensure that operators understood the risks. Plant management pushed forward with a poorly planned test at an inappropriate power level. And the operators in the control room disabled multiple safety systems and violated administrative limits in ways that put the reactor into exactly the conditions where its design flaws would prove catastrophic.
No single person or group caused Chernobyl. The disaster required failures at the design level, the regulatory level, the management level, and the operational level to align on the same night. The Soviet government’s decision to blame six men in a courtroom was a political choice, not an engineering conclusion. The reactor was a loaded weapon. The operators pulled the trigger, but they didn’t know the gun was pointed at themselves.