Explosive Potential of a Fully Fueled Launch Vehicle and What an On-Pad Explosion Can Do

Key Takeaways

• Stored propellant energy sets the ceiling, but mixing, ignition, and confinement decide blast severity.
• Launchpad damage usually comes from fire, fragments, and structural failure, not a neat bomb-like yield.
• Starship V3 sits in a class of its own on liquid energy, while solids complicate SLS and Vulcan.

What Explosive Potential Really Means on a Launchpad

A fully fueled rocket on a launchpad is not a bomb in the classic sense. It is a tall, thin structure full of cryogenic liquids, pressurized gases, plumbing, valves, control systems, and thin-walled tanks that are designed to keep fuel and oxidizer apart until combustion happens inside engines.

That distinction matters. A launch accident is rarely one clean event. It is usually a sequence of tank ruptures, fluid release, flash boiling, delayed ignition, fire growth, shock loading, structural breakup, and debris impacts. The damage picture is built from blast waves, prolonged fire, fragmentation, and secondary failures in the pad itself. NASA blast-environment work and a related NASA paper on TNT scaling limits for launch vehicle accidents both make the same larger point. A propellant accident does not behave like a tidy laboratory detonation, especially close to the source where launchpads live.

That is why casual comparisons to a single TNT equivalent number usually mislead. A rocket can hold an enormous amount of chemical energy and still fail in a way that produces less shock than expected because mixing is incomplete, ignition is uneven, or much of the energy goes into heat and expanding fire rather than a short, hard pressure pulse. The reverse can also happen. Under the wrong mixing and confinement conditions, a smaller propellant load can produce a sharper blast than appearances suggest.

A launchpad makes the problem harsher. The vehicle sits over concrete, steel, trenches, ducts, flame diverters, cable runs, propellant plumbing, and water systems. Hard surfaces reflect pressure. Fragments ricochet. Concrete can spall and become its own hazard. If the pad surface breaks up, the pad is no longer only a victim. It becomes part of the debris field.

How Rocket Propellants Release Energy on a Launchpad

The main liquid combinations used by large Western launch vehicles today are liquid oxygen with liquid hydrogen, liquid methane or RP-1. Their accident behavior is not identical.

Hydrogen and oxygen, used in the Space Launch System core stage and in upper stages such as Centaur V and New Glenn, form a very high-energy combination by fuel mass. The U.S. Department of Energy uses about 120 megajoules per kilogram as a standard lower heating value for hydrogen. Hydrogen also disperses quickly once released. That tends to reduce the time available for a dense, well-mixed combustible cloud to exist near the ground, though it does not remove danger. It shifts the way danger appears.

Methane and oxygen, used by Starship and the first stages of Vulcan and New Glenn through BE-4 engines, behave differently. Methane can flash from cryogenic liquid to a cold vapor cloud that hugs the ground before warming and dispersing. The Alternative Fuels Data Center gives liquefied natural gas an energy content that works out to about 49 megajoules per kilogram. That is far below hydrogen by fuel mass, but methane is denser and easier to store in large quantities.

RP-1 and oxygen, used by Falcon 9 and Falcon Heavy, bring a different accident profile again. NASA combustion modeling for kerosene surrogates uses a value close to 43 megajoules per kilogram. RP-1 is less volatile than liquid hydrogen or methane, which affects how a spill or breakup evolves. It can feed long fires and burning pools more readily than hydrogen, and its visible fireball can look enormous even when the shock component is not behaving like a high explosive.

Then there are solid boosters. They change the picture because fuel and oxidizer are already mixed inside the grain. A solid motor failure is still not the same as a military high explosive detonation, but it can create a harsh combination of case rupture, violently rising internal pressure, large burning fragments, and sustained impingement in places the pad was never meant to receive it. The SLS solid rocket booster fact sheet and Northrop Grumman’s GEM 63XL data sheet show how much reactive mass these systems carry. Once solids enter the problem, a single liquid-style blast number stops telling the whole story.

From Fuel Load to Blast

The cleanest way to compare launch vehicles is to separate three ideas that people often blur together.

The first is stored chemical energy. That can be estimated from fuel mass and heating value. The second is blast efficiency, which is the fraction of that stored energy that becomes a destructive pressure wave. The third is pad damage, which includes blast but also includes thermal exposure, fragment impact, trench erosion, line rupture, and ground failure.

This article treats stored chemical energy as a ceiling, not a forecast. That follows the direction of NASA’s 1971 Space Shuttle TNT-equivalency study, the older 1965 NASA blast-hazard memorandum, and the later NASA work that warned against using TNT analogies too close to a launch vehicle. Those papers do not say TNT comparisons are useless. They say they become less faithful in the near field, which is exactly where a launchpad sits.

The chemistry helps explain why. For methane combustion in pure oxygen, a simple stoichiometric reaction gives a fuel share of about 20 percent by total propellant mass. For hydrogen with oxygen, the fuel share is only about 11 percent by mass because hydrogen is so light. For RP-1 style hydrocarbon combustion, a useful engineering approximation from the NASA kerosene paper puts the fuel share near 22 to 23 percent in a stoichiometric oxygen mixture. Those percentages show why a giant propellant load does not translate directly into an equally giant fuel-energy number. Much of the mass is oxidizer.

What matters even more is how much of that energy becomes shock. NASA’s hydrogen and oxygen blast testing found that most test cases sent a small fraction of available energy into the blast wave, while an outlier with longer pre-ignition mixing consumed more than 20 percent. That is a large swing. It explains why two accidents with similar propellant loads can damage pads in very different ways.

Public discussion tends to overstate bomb-like blast and understate pad fragility. The harder engineering truth is almost the reverse. For many launch accidents, the pad is more likely to be wrecked by a combined assault of impulse, fragments, fire, and secondary system failures than by a single iconic shockwave number. That is why trenches, deflectors, shields, water deluge, and standoff exist in the first place.

Relative Explosive Potential Under Stated Assumptions

The table below compares six current large launch vehicles under a single set of stated assumptions. It does not predict what any one accident will do on a specific day. It compares the upper-bound chemical energy available in the fueled vehicle, using current public manufacturer data where available and transparent approximations where the public record is incomplete.

A few assumptions matter enough to say out loud. Starship V3 is represented with the current public Starship and Super Heavy propellant capacities because SpaceX has not posted a separate V3 tankage figure on that page, even though V3 testing has begun and outside reporting has described the taller V3 vehicle. Vulcan is represented as the six-booster VC6 configuration because that is the highest public solid-assisted configuration on the current ULA page. New Glenn is the messiest case because Blue Origin does not publish one consolidated full-stack propellant number on its current public vehicle page. Its row uses a bounded estimate built from public first-stage tank volumes and public upper-stage geometry.

The SLS and Vulcan rows also separate liquid-stage energy from solid-booster burden. That is deliberate. A single number that forces PBAN or GEM 63XL solid propellant into the same column as hydrolox or methalox hides the fact that solids change the damage mechanism, not just the total energy bookkeeping.

That table places Starship in a separate liquid-energy class from the rest of the field under current public numbers. It also shows why Falcon Heavy, New Glenn, and the liquid core of SLS cluster closer to one another than most casual discussion suggests. The awkward row is Vulcan. Its liquid energy ceiling is lower, but six GEM 63XL boosters add a kind of pad hazard that the liquid-only number does not capture well.

The harder judgment call is New Glenn because the public record is incomplete in a very specific way. Blue Origin’s current New Glenn page gives engine types, payload class, height, and mission framing, while public technical summaries describe first-stage tank volumes and an upper stage that is roughly 26.8 meters tall. That is enough to bound the vehicle, but not enough to claim a single precise fueled mass with a straight face. A range is the more defensible answer.

What an On-Pad Explosion Does to the Launchpad

A launchpad is built to survive normal launch violence. It is not built to survive every failure mode of a fully fueled vehicle.

The first stress is overpressure and impulse. NASA’s launch-accident papers explain why impulse often matters more than peak pressure alone when real structures fail. A short, high spike can break brittle items. A lower but longer pressure load can shove, twist, and peel apart structures that looked strong on paper. Pads are full of things that dislike either mode. Cable trays, instrumentation boxes, ceramic insulators, access arms, valves, seals, hydraulic lines, umbilical plates, ducts, and doors all fail at lower loads than the largest structural members.

The second stress is fragmentation. Tanks do not just disappear when they rupture. They become fast fragments. Engine sections, manifolds, pipes, brackets, access platforms, and chunks of concrete can all become projectiles. That is one reason NASA’s blast-environment studies treat fragments as a primary hazard rather than a side effect.

The third stress is heat. Launch accidents can produce fireballs that last long enough to cook steel, destroy cable insulation, weaken seals, and ignite secondary systems that survived the initial shock. A pad can go from repairable to major rebuild not because the first pressure wave was overwhelming, but because the next twenty or thirty seconds kept feeding fire into places that normal launch exhaust does not usually reach.

This is why Launch Complex 39B was rebuilt with a heavy flame trench, large refractory protection, and a huge water deluge system. NASA describes a water tower of roughly 400,000 gallons, released in under 30 seconds, with peak flow near 1.1 million gallons per minute. That is not excess engineering. It is the baseline needed to keep a very large rocket from destroying its own pad when everything goes right.

For very large launch systems, minimalist pad design is false economy. It may save steel and concrete in the short run, but it pushes cost into downtime, cleanup, facility damage, and redesign. The lesson from modern heavy launch operations is not that the rocket alone determines pad survival. It is that pad systems must be sized for both nominal exhaust and abnormal breakup, or the pad itself becomes part of the hazard.

Case Studies That Show the Range of Outcomes

The Orb-3 Antares accident on October 28, 2014, remains one of the cleanest public examples of near-pad vehicle loss and facility damage. NASA’s independent review team executive summary states that range safety issued a destruct command to reduce expected ground impact damage, yet the vehicle still came down near the pad and damaged the launch pad and adjacent facilities. The public record from Spaceflight Now and Space.com put repair and modification costs around 15 million dollars and tied the work to damaged towers, debris cleanup, and contaminated soil and water handling.

That accident matters because it shows what a non-nuclear, non-weaponized propellant accident can do to real infrastructure. The launch site was not erased. It was still damaged enough to require an expensive and prolonged recovery effort. The public was unharmed, which says a lot about standoff and procedure. The pad still paid heavily.

The AMOS-6 Falcon 9 accident on September 1, 2016, shows a different pattern. The vehicle was lost during pre-launch operations at Space Launch Complex 40, before liftoff, while the rocket was coupled to the ground support structure. That is a high-consequence moment because the rocket is fueled, the pad is physically attached to it, and the vehicle has not yet moved away from the site. Space Policy Online reported the damage assessment that followed, and Spaceflight Now documented the long path back to service. The headline lesson was not a dramatic blast radius. It was downtime. A single pad-side vehicle loss can tie up a major launch facility for roughly a year or more.

The April 20, 2023 Starship test in South Texas added another lesson. Public discussion focused on the vehicle breakup. The larger engineering lesson was what happened to the launch surface. Reporting after the event, including AP coverage of the FAA corrective-action phase and the later FAA Starship environmental review page, describes extensive pad damage and the move to a water-cooled steel plate and improved deluge. That was not cosmetic. It was an admission, expressed in engineering hardware, that surface interaction at that scale could not be treated as an ordinary pad problem.

The FAA Starship project page also shows how regulators increasingly frame these events. They are not only launch failures. They are environmental, debris, and facility-design problems. That framing is useful because it matches what launch infrastructure teams actually have to fix after an accident.

Design Choices and Operational Controls That Matter

Large launch systems do not become safe because their operators trust the rocket. They become manageable because the pad, procedures, and site geometry are designed around the fact that bad outcomes remain possible.

The first control is reducing time on the pad in the most exposed state. NASA’s clean-pad approach for Launch Complex 39B reflects that idea. More work is done away from the pad, and time at the pad is compressed. That does not change stored energy, but it cuts exposure for people and hardware.

The second control is flame and acoustic management. NASA’s LC-39B water deluge system exists because even a normal ignition sequence produces enough acoustic and thermal punishment to damage the vehicle and the pad. Once that system exists, it also becomes part of the accident-mitigation architecture. It cannot stop a major blast wave. It can reduce thermal escalation and secondary fires after the initial event.

The third control is geometry. Flame trenches, diverters, shields, and standoff are attempts to manage where energy goes. A pad that gives hot gas and debris a preferred path survives better than a flat slab that reflects energy back into the vehicle and support structures. That is one reason the Starship pad redesign after 2023 drew so much attention. It changed the geometry, not just the materials.

The fourth control is remote operation and exclusion. The Orb-3 record shows what disciplined standoff can do. A vehicle and pad can be lost without public casualties when access is controlled and decisions are made early enough. This part of launch safety is less glamorous than engine performance or vehicle reusability, but it matters just as much.

The fifth control is not pretending that one metric rules them all. Public debate likes simple answers. Engineers do not have that luxury. A launch site manager who knows only a TNT-equivalent number still does not know whether the next accident will rip umbilicals apart, crater concrete, burn through water lines, or throw live solid-motor fragments into adjacent facilities. Separate hazards need separate defenses.

Summary

The launchpad’s weakest point is not always its concrete or steel. It is the time and complexity needed to bring a damaged site back into service.

A fully fueled large rocket can store energy measured in terajoules, and that matters. Under current public numbers, Starship sits far above the rest of the field in liquid chemical energy. Falcon Heavy, New Glenn, and the liquid core of SLS sit in a second tier that is still immense by any ordinary industrial standard. Vulcan carries less liquid energy, yet its highest-booster configuration introduces a pad damage mode that the liquid number alone does not represent well. Falcon 9 remains the baseline vehicle in this comparison, and even that baseline is serious enough to shut down a major pad for a long period if the wrong failure happens at the wrong moment.

The more useful conclusion is not that one rocket is the “most explosive” in a movie sense. It is that high-cadence spaceflight is becoming a ground-infrastructure problem as much as a vehicle problem. Reusability, cadence, and cost all lean on the same hidden requirement. The pad has to survive, or at least recover fast. That is why flame trenches, steel protection, water deluge, shielding, standoff, and site layout now deserve as much attention as engine cycle and payload mass. A launch system that can fly again in weeks is only as real as the launchpad beneath it.

Appendix: Top 10 Questions Answered in This Article

What does explosive potential mean for a fully fueled rocket on a launchpad?

Explosive potential means the maximum stored chemical energy in the fueled vehicle and the ways that energy can turn into damage. On a pad, the main damage paths are blast, heat, fragments, and secondary failure of pad systems. The stored energy ceiling is not the same as actual blast yield.

Why does a rocket not behave like a single giant TNT bomb?

Rocket propellants usually do not mix and ignite in the ideal way high explosives do. Much of the energy can go into fire, expanding gas, and separated burning fragments instead of one short, sharp shockwave. That is why blast efficiency can vary widely between accidents.

Which launch vehicle in this comparison has the largest liquid-energy ceiling?

Under current public vehicle data and the assumptions used in this article, Starship V3 has the largest liquid-fuel energy ceiling by a wide margin. Its current public propellant capacity places it well above Falcon Heavy, New Glenn, SLS core stage, Vulcan, and Falcon 9. That does not mean every Starship accident would produce the largest blast, but it does set the highest liquid-energy ceiling.

Why are SLS and Vulcan harder to reduce to one number than Falcon 9 or Falcon Heavy?

SLS and Vulcan use large solid rocket boosters in important configurations. Solids change the mechanics of a pad accident because they add prolonged burning, hard fragment hazards, and case-rupture behavior that do not map neatly onto a liquid-propellant energy table. A single number hides too much.

How does launchpad damage usually happen in a rocket accident?

Pad damage often comes from a combination of pressure loading, concrete breakup, fragment impact, and sustained fire. The pad can also damage itself when trenches, liners, or deck surfaces fail and become debris. In many real accidents, that combined effect matters more than a single blast-wave number.

Why do flame trenches and water deluge systems matter so much?

They are built to protect the pad and vehicle during normal ignition and ascent. In an accident, they also limit thermal escalation, direct hot gas away from vulnerable structures, and reduce the chance that normal launch loads turn into structural failure. They are part of accident tolerance, not just launch acoustics.

What did the Antares Orb-3 failure show about pad risk?

It showed that even a short-lived, near-pad vehicle loss can damage the launch site and adjacent facilities without harming the public when exclusion zones work properly. It also showed that pad recovery can cost many millions of dollars and require extensive cleanup. That made the event a facility-loss story as much as a vehicle-loss story.

What did the Falcon 9 AMOS-6 accident show?

AMOS-6 showed how damaging a pre-launch pad-side accident can be when a fueled rocket is still physically coupled to the ground systems. The long rebuild of Space Launch Complex 40 demonstrated that launch infrastructure can become the schedule bottleneck after a vehicle loss. The rocket was destroyed quickly, but pad recovery took far longer.

Why is Starship’s 2023 South Texas launch remembered as a pad lesson?

Because the event exposed how destructive very large exhaust and breakup loads can be to a launch surface that lacks enough protection. The response was a major redesign centered on shielding and water management. That changed the public understanding of pad design for very large reusable systems.

What is the most useful way to think about rocket explosive potential?

The best way is to think in layers. Stored energy matters, but so do blast efficiency, fragment hazard, fire duration, pad geometry, and recovery time. A launchpad survives accidents through systems and layout, not through a single yield number.