The Butterfly Effect Behind Falcon 1's Fatal Failures
Before Falcon 1 ever reached orbit, it failed three times — and each failure traced back to a detail almost too small to notice. A corroded nut. A half-empty tank. A few drops of leftover fuel.
!cover.pnghttps://jjxxiuscechxakmindos.supabase.co/storage/v1/object/public/newsletterimages/originals/draft-mqo49o3f/01-cd0f588840965242.png?v=cd0f58884096
SpaceX's Falcon 1 reached orbit on its fourth launch — the very first attempt that actually worked. But Falcon 1's road to orbit was anything but smooth. Before that moment, it had failed three times, and those three failures pushed both Elon Musk and SpaceX to the brink.
You may have heard that all three failures were caused by tiny details. In this post, I want to walk through the root cause behind each one, and how each small detail triggered a butterfly effect that snowballed into catastrophe. When I started researching, I was honestly a little worried the topic would be too technical. But the chain reactions hiding inside these tiny details turned out to be genuinely fascinating — and they gave me a much deeper appreciation for the old saying: the devil is in the details.
Failure One — A Single Corroded Nut
On March 24, 2006, the highly anticipated Falcon 1 made its historic first flight. But only about 33 seconds after liftoff, the first-stage engine suddenly lost thrust. The vehicle went out of control, and the launch failed. A detailed debris analysis led by DARPA — the Defense Advanced Research Projects Agency — later revealed a deeply hidden engineering blind spot.
The root cause was this tiny component: the B-nut. It's a connecting nut used on tube fittings in fields like aviation and automotive engineering. On the outside it has a hex surface for a wrench; on the inside, a round threaded hole. Its job is to join a tube to a fitting, provide clamping force, create a seal, and keep fuel from leaking.
On that first flight, the inside of this nut had been badly corroded — corroded enough to crack. Fuel that should have stayed sealed began leaking out and ran down the outer wall of the thrust chamber. The high-pressure fuel was quickly ignited by the exhaust plume. The fire burned through the control lines almost instantly, and 34 seconds after liftoff the engine shut down completely. That was the end of Falcon 1's first flight.
This is where the butterfly effect becomes impossible to miss: the corrosion of one nut shut down an entire engine. So why did it corrode in the first place?
!Video: CorrosionEN.mp4https://jjxxiuscechxakmindos.supabase.co/storage/v1/object/public/newsletterimages/originals/draft-mqo49o3f/02-c7a58ae4a6843fbf.mp4?v=c7a58ae4a684
The nut itself was made of aluminum, while the tube it connected to was stainless steel. Put two different metals together, then set them at a launch site on an island near the equator in the Pacific — warm, humid, the air full of salty mist — and you have a serious problem. What you've built, basically, is a battery. Saltwater conducts electricity. Stainless steel has a higher electrical potential and is more stable, so think of it as the positive electrode. Aluminum has a lower potential and gives up electrons more easily — the negative electrode. And just like a battery slowly discharging, that aluminum nut corroded away.
The fix was almost insultingly simple. To eliminate the risk, SpaceX swapped every aluminum nut in later designs for a stainless steel one. Now the tube and the nut were the same metal, there was no potential difference between them, and the deadly "battery effect" simply couldn't happen again.
Failure Two — The Death Wobble
One year later, on March 21, 2007, Falcon 1 made its second attempt. This time the first-stage flight looked good. But during stage separation, the first stage bounced back and lightly tapped the niobium-alloy engine nozzle of the second stage. The impact was slight — but it introduced a tiny deviation into the second stage. And that tiny deviation was enough to set the gears of fate turning again.
To correct that deviation, the second stage's control system stepped in. Imagine the flight path drifting a little to the left; the control system would gimbal the engine nozzle slightly, nudging the path back to the right. But by now the rocket was in its second-stage phase, and the oxidizer was already half spent — part of the tank was empty. During the correction, the liquid oxygen inside began to slosh. Inertia slammed it toward the far wall of the tank, shifting the center of gravity. The controller detected that shift, decided it now needed to correct the other way — and the liquid sloshed back. According to the records, this "death wobble" between the control system and the fluid first appeared about 4 minutes and 20 seconds after liftoff, and continued for more than three minutes.
It got worse. The frequency at which the engine was gimbaling to correct lined up almost perfectly with the rhythm of the liquid oxygen sloshing in the half-empty tank.
!Video: DeathWobbleEN.mp4https://jjxxiuscechxakmindos.supabase.co/storage/v1/object/public/newsletterimages/originals/draft-mqo49o3f/03-983f734760059c3a.mp4?v=983f73476005
What does that mean? Picture the liquid oxygen as someone on a swing. Every time it was just about to swing, the engine happened to give it another push in the same direction. The sloshing grew larger and larger. Under the strong centrifugal force, the liquid oxygen was flung toward the tank's inner walls while a huge vortex opened up in the center. At that point the second-stage engine could no longer draw in liquid oxygen — instead, it started sucking in the gas used to pressurize the tank. In aerospace engineering this is extremely dangerous: the engine loses its oxidizer and begins "running dry" on ingested gas. Eventually the protection system forced a shutdown, and the rocket lost power and dropped out of the sky.
The physics here is almost identical to a story I heard as a kid: British soldiers marching across a bridge and bringing it down. In 1831, on England's Broughton Suspension Bridge, soldiers crossed in perfect, synchronized step — and their marching frequency happened to match the bridge's natural vibration frequency. The bridge collapsed. Sound familiar? One frequency lining up with another, producing harmonic oscillation, ending in disaster.
To cure it, engineers added physical ring baffles inside the second stage's liquid-oxygen tank. The baffles increased fluid damping and reduced how much the liquid could slosh. They also rewrote the control logic in the flight software, deliberately shifting the control frequency so the system's frequency band stayed a safe distance from the fluid's natural frequency. That broke the feedback loop — the runaway cycle where every wobble feeds the next one and the sloshing just keeps growing.
And so, once again, the butterfly effect of a "half-full bottle of water sloshing around" destroyed a launch vehicle worth tens of millions of dollars.
Failure Three — A Few Drops of Leftover Fuel
The third failure came from an upgrade to the engine's cooling system. Most metals melt below 2,000°C, but when a rocket engine ignites, the combustion chamber can easily blow past 3,000°C. Without proper cooling, the engine wall simply can't survive that heat. The fascinating part: the coolant they used was the fuel itself — kerosene. Using the fuel as the coolant.
Here's how it works. Kerosene from the fuel tank, pressurized by the turbopump, flows into cooling channels built into the engine wall — channels made from hundreds of extremely fine, thin-walled metal tubes welded tightly together. The fuel winds around the nozzle and combustion chamber, soaking up heat as it goes. So it cools the chamber and arrives pre-heated, ready to burn. This trick is called regenerative cooling.
So where did it go wrong? Once again, at stage separation. The first stage had finished its job and stopped feeding fresh fuel to the nozzle. But — the devil is in the details — inside the cooling channels along the nozzle wall, there was still some kerosene left over. The surrounding hot metal kept heating that residual kerosene, which rapidly vaporized and expanded. Even with the main valves and turbopump shut, the expanding leftover fuel was pushed through the channels into the combustion chamber, where it kept burning, on a small scale, with the remaining liquid oxygen.
The result: for several seconds after the shutdown command, the engine didn't fully switch off. It kept producing a tiny, weak push — residual thrust. And because of that thrust, when the two stages separated, the first stage was still creeping forward — and it rear-ended the second stage. Launch failed.
What makes this one especially cruel is that it was invisible on the ground. At sea level, atmospheric pressure is higher than the chamber pressure this residual thrust could produce, so the weak internal push was simply suppressed by the outside air — the rocket looked completely shut down. Only in the near-vacuum of space, with no atmosphere to push back against the chamber, did that residual pressure finally express itself as real forward thrust.
Reflecting on this failure, Musk later admitted, with real regret, that if they'd added just one more second of waiting time in the software, the tragedy could have been avoided. And the eventual fix involved no hardware changes at all. They changed a few lines of code, adding roughly a 3.5-second countdown to wait for the thrust to fall to zero. That was it.
The Darkest Hour
After three failures, Musk and SpaceX entered their darkest period. The three Falcon 1 attempts had burned through 100 million dollars. Tesla was facing a severe supply-chain crisis. The global financial crisis was drying up investment everywhere — never mind for a high-risk, hardcore venture like SpaceX. Musk himself was going through a divorce, and was so short on cash that he couldn't make his own rent and had to borrow money from friends.
But heroes tend to have something extraordinary about them. It was exactly here that Musk delivered one of the most powerful displays of leadership in his career. Former employees recall the day of the third failure: when the video froze on the moment the rocket broke apart, the entire mission control room fell into a deathly silence. Musk — who had been working more than 20 hours straight and was utterly exhausted — walked to the front of the team and addressed everyone. He acknowledged the failure, and then said:
"For my part, I will never give up. And I mean never. As long as you stand with me, we will win."
— Elon Musk, to the SpaceX team, after the third Falcon 1 failure
And then the story took a dramatic turn. Falcon 1's fourth launch finally succeeded. From there, SpaceX went on to win NASA contracts and to develop Falcon 9, Starship, Dragon, and everything that followed.
Hopefully, under Elon's leadership, I might one day get the chance to see Mars for myself. Even if it's a one-way trip — that would be fine too.
