What happens if one ducted fan fails during flight?

In a distributed propulsion aircraft equipped with 20 ducted units, losing a single thruster represents a loss of under 5% of total thrust authority. The fly-by-wire flight control system detects the failure within milliseconds and dynamically redistributes power to adjacent and opposing thrusters, allowing the aircraft to continue flight and execute a safe, stable landing with zero pilot panic.

Are enclosed ducted fans safer than open propellers?

Substantially safer. Enclosed ducted fans feature a structural composite shroud that acts as a physical protective shield. On the ground, it eliminates the lethal hazard of exposed rotating blades to passengers and ground crew. In flight, the shroud provides FAA 33.19-compliant blade containment, capturing thrown fragments in the event of foreign object impact.

What does the 10^-9 safety design target mean in aviation?

The 10^-9 per flight hour target is the highest safety classification defined in civil aviation (FAA Part 25 and EASA CS-25/SC-VTOL). It dictates that any catastrophic failure condition resulting in fatalities or hull loss must be extremely improbable—less than one occurrence in one billion hours of fleet flight time. This is achieved through system architecture redundancy rather than relying solely on component durability.

How is eVTOL electric propulsion certified for passenger flight?

Propulsion systems undergo component-level environmental qualification (RTCA DO-160G for temperature, vibration, moisture, and lightning), flight software verification (DO-178C Level A), programmable hardware assurance (DO-254), and rigorous blade-out containment spin tests under FAA Part 33 / EASA CS-E guidelines before OEM aircraft receive formal Type Certificates.

Home/Solutions/eVTOL Safety & Redundancy

Aviation-Grade System Safety/Civil Aviation Baseline

eVTOL Safety: Redundancy, Enclosed Rotors and Fault-Tolerant Landing

Q: Are passenger eVTOL aircraft safe?

Yes. Passenger eVTOL aircraft are engineered to meet the same stringent safety baselines as commercial airliners (such as Boeing 787 or Airbus A350), targeting a catastrophic failure rate of less than 10^-9 per flight hour. Achieving this design target requires eliminating all single points of failure through distributed propulsion, triple-redundant flight avionics, and segmented high-voltage batteries.

Eliminating single points of failure across urban skies through 20-fan distributed redundancy, ballistic FAA 33.19 Kevlar blade containment, and powered lift without complex tilting mechanisms.

10⁻⁹/ fh

Aviation Catastrophic Safety Target

20Independent Fans

No Single Point of Failure

FAA §33.19

Full Blade Containment Standard

53dBA @ 100m

Urban Vertiport Acoustic Baseline

Yuntu eVTOL Ducted Propulsion Blade Containment Nacelle

FAA 33.19 Ballistic Nacelle

20-Fan Distributed Array

iAerospace Safety Philosophy

Commercial passenger eVTOL safety is established upon the total elimination of Single Points of Failure (SPOF). Unlike traditional helicopters that rely on a single main transmission gearbox or swashplate, distributed electric propulsion (DEP) utilizes 16 to 20 independent ducted thrusters. If one or more thrusters fail, real-time control allocation algorithms instantaneously redistribute thrust across healthy propulsors, maintaining vehicle pitch, roll, and yaw authority for an orderly, controlled landing.

Ref:Yuntu Flight Systems & Airworthiness Lab

§ ARCHITECTURE SHIFT/Architectural Shift

Why eVTOL Safety Is Fundamentally Different

Traditional rotary-wing aviation concentrates flight-critical loads into single mechanical nodes. Distributed Electric Propulsion replaces mechanical vulnerability with digital multi-channel redundancy.

EASA SC-VTOL §2510 / FAA §21.17(b)

Elimination of Single Main Transmission

Conventional helicopters feature a central gearbox whose failure is catastrophic within seconds. Distributed electric ducted arrays divide propulsive power across isolated electrical channels with no shared mechanical shafts.

DO-160G / DO-254 Hardware Assurance

Powered Lift Without Tilting Servos

Tilting-rotor architectures introduce complex mechanical tilt bearings, swashplates, and servo actuators that can jam during transition. Tandem-wing powered lift uses differential fan thrust for vectoring, eliminating critical hinge failure modes.

RTCA DO-311A Battery Safety

Segmented Energy & Isolated Power Buses

Propulsion channels operate across galvanically isolated 800V DC power buses fed by physically partitioned battery segments. A single thermal runaway or bus short circuit cannot disable neighboring fan clusters.

§ REDUNDANCY PILLARS/System Architecture

The Core Pillars of Ducted Fan Redundancy

How aerospace aerodynamics, mechanical containment, and flight control software combine to safeguard passengers and ground communities.

Aerodynamic Fault Tolerance

20 Distributed Ducted Fans: Zero Single Point of Failure

Granular thrust allocation across independent nacelle modules

By distributing gross takeoff thrust across 20 compact ducted propulsion units, losing a single motor or inverter results in losing less than 5% of total vertical lift. Aerodynamic control margins easily absorb the asymmetry without requiring violent pitch compensation.

Assurance Standard: DO-178C Level A Flight Software

Thrust Loss per Fan< 5% Total System

Dynamic Response< 15 ms Re-allocation

Bus RedundancyMulti-Channel Isolated

Mechanical Barrier

Enclosed Rotor Safety & FAA 33.19 Ballistic Containment

Zero open blades in vertiport ground environments

Open rotor propellers pose severe decapitation hazards to ground passengers and airport personnel. Yuntu ducted cowls feature Kevlar-reinforced composite containment shrouds engineered to capture released blades or foreign objects during bird-strike events.

Assurance Standard: FAA 14 CFR §33.19 Containment

Containment ShroudHigh-Toughness Carbon/Kevlar

FOD ProtectionComplete Rotor Enclosure

Ground Safety Margin100% Shrouded Perimeter

Digital Avionics

Real-Time Dynamic Thrust Re-allocation Control Laws

Instantaneous closed-loop attitude stabilization

Telemetry sensors detect current surges, RPM anomalies, or thermal spikes within milliseconds. The flight control computer automatically shuts down the degraded unit and over-drives diametrically opposed healthy fans, ensuring zero loss of roll or yaw control.

Assurance Standard: Triplex Flight Control Computers

Fault Detection Time< 8 ms Telemetry Loop

Attitude Deviation< 1.5° Bank Angle

Pilot WorkloadTransparent Fly-by-Wire

§ FMEA ANALYSIS/Failure Modes & Effects (FMEA)

Controlled Landing Scenarios After In-Flight Thruster Failures

Engineering simulations and hardware-in-the-loop (HIL) rig tests demonstrate predictable, controlled flight profiles under severe partial power loss.

Failure Scenario	Traditional Risk	DEP Mitigation	Control Law Action	Landing Outcome
Single Propulsor Failure (One Fan Inoperative - OEI)	Violent yaw snap, immediate emergency autorotation required.	Immediate thrust compensation via opposite fan group; pilot feels negligible yaw.	Slight RPM ramp-up on remaining 19 thrusters (< 4% power reserve).	Normal transition or nominal vertical landing on planned vertipad.
Dual Asymmetric Fan Failure (Two Fans on Same Wing)	Uncontrollable rolling moment resulting in catastrophic spin.	Differential elevon deflection combined with inner ducted fan over-torque.	Autonomous rerouting to nearest contingency vertiport or airport runway.	Controlled powered landing with nominal vertical descent rate (< 1.5 m/s).
High-Altitude Bird Strike / Foreign Object Ingestion	Exposed propeller shattered, shrapnel punctures passenger fuselage or flight controls.	Composite cowl contains fractured fragments internally (FAA §33.19 compliance).	Damaged motor isolated; flight continues on adjacent independent nacelles.	Safe diversion with airframe and passenger compartment completely intact.

§ AIRWORTHINESS STANDARDS/Airworthiness & Environment

Safety Targets, Acoustic Compliance, and Public Acceptance

Urban community acceptance is inseparable from aviation safety. A quiet aircraft that operates safely builds the foundation for municipal skyway certification.

Civil Airliner Safety Philosophy (10⁻⁹ Target)

Passenger eVTOL airworthiness regulations establish an allowable probability of catastrophic failure at less than one per billion flight hours (10⁻⁹ / fh). This design philosophy guides every redundancy boundary in Yuntu powertrains.

53 dBA Acoustic Shielding for Urban Skyports

By enclosing the rotor within tuned micro-perforated acoustic liners, ducted fans eliminate blade tip vortex shockwaves. Sideline noise is attenuated to approximately 53 dBA at 100 meters, meeting the strictest urban vertiport zoning ordinances.

Read eVTOL Acoustic Standards Guide →Explore Airworthiness Readiness →

Safety & Airworthiness Telemetry

Sideline Noise @ 100m53 dBA

Matches quiet urban ambient traffic

Noise Reduction vs Open Rotor-12 to -15 dB

Logarithmic sound pressure drop

Blade Containment StandardFAA 33.19

100% blade fragment capture

Design Target10⁻⁹ / fh

Aviation commercial passenger benchmark

Aligned with Civil Aviation Safety Design Targets

§ FAQ/Safety FAQ

Frequently Asked Questions: eVTOL Safety & Redundancy

Aerospace engineering perspectives on airworthiness, failure tolerance, and passenger protection.

Yes. Passenger eVTOL aircraft are engineered to meet the same stringent safety baselines as commercial airliners (such as Boeing 787 or Airbus A350), targeting a catastrophic failure rate of less than 10^-9 per flight hour. Achieving this design target requires eliminating all single points of failure through distributed propulsion, triple-redundant flight avionics, and segmented high-voltage batteries.

Discuss Safety-Critical Propulsion for Your eVTOL Program

Partner with Yuntu’s aerospace systems engineers to integrate fail-safe distributed ducted fans, FMEA reliability data packages, and acoustic containment nacelles into your airframe.