Investigation Summary
The failure originated in a small oil feed stub pipe within the engine's HP/IP hub assembly. Due to a manufacturing defect at Rolls-Royce, the pipe wall was thinner than specified, leading to a fatigue crack. This crack leaked oil, sparking an internal fire that weakened the turbine disc drive arm. The resulting separation caused the disc to overspeed and burst. The debris severed wiring looms and hydraulic lines, leading to a 'Black Swan' event where the crew was overwhelmed by cascading system failures, including the inability to shut down the No. 1 engine after landing.
Final Conclusions
The ATSB concluded the primary cause was a manufacturing non-conformance in the oil feed stub pipe. The investigation highlighted that quality assurance processes at Rolls-Royce failed to detect pipes with offset bores. The successful outcome was attributed to the exceptional CRM of the five-pilot crew (including two check captains) and the robust, albeit damaged, design of the A380 which remained controllable despite multiple redundant system failures.
Video Analysis
Part of Qantas Cockpit Voice Recording Lost — Green Dot Aviation explores the catastrophic engine failure of QF32 and how the crew managed a 'cascading failure' scenario.
Watch on YouTube ↗If playback is blocked, the owner has disabled embedding — use the link above.
Systems & Failure Modes
Rolls-Royce Trent 900
The high-bypass turbofan engine that suffered an uncontained failure of the intermediate pressure turbine disc.
ECAM (Electronic Centralised Aircraft Monitor)
The system that displayed over 50 checklists to the crew, many of which were contradictory due to the extent of the damage.
IPTOS (IP Turbine Overspeed Protection)
A safety software update introduced after the accident to shut down engines before a disc can burst.
Interesting Facts
- 01The aircraft was the first A380 delivered to Qantas, named 'Nancy-Bird Walton'.
- 02The flight crew consisted of five pilots: the Captain, First Officer, Second Officer, and two Check Captains.
- 03The landing was performed at a weight of 440 tonnes, which was 50 tonnes over the maximum landing weight.
- 04The No. 1 engine continued to run for nearly three hours after landing because the control cables were severed.
- 05Debris from the engine fell onto Batam Island, damaging a school and several houses, but caused no ground injuries.
Safety Actions & Advisories
Engine Redesign
Source ↗Rolls-Royce redesigned the HP/IP hub oil feed stub pipe to ensure wall thickness and prevent fatigue cracking.
Software Update
Introduction of the IPTOS (Intermediate Pressure Turbine Overspeed Protection) system to automatically shut down the engine if a shaft failure is detected.