On the night of 26 September 1983, a Soyuz rocket was on fire at its base at Baikonur. Above the flames sat two men, Vladimir Titov and Gennady Strekalov, strapped into a capsule and waiting for a launch to the Salyut 7 space station that would never come. The story is usually told as a lucky escape. The record tells a more interesting one, about how that escape was designed to work.

The usual version credits the crew’s survival to good luck and quick thinking. Both were real. But the thing that actually pulled Titov and Strekalov clear was a backup radio path that remained available after the normal wired abort command had failed.

The fire and the severed cables

About 90 seconds before launch, a valve controlling fuel flow in one of the rocket’s side boosters malfunctioned. Fuel rushed into the turbopump assembly, the turbines oversped, and a blade broke loose, producing a spark that started a fire at the foot of the rocket. Within seconds the flames were climbing.

In a normal pad emergency, launch control fires the escape system: a rocket tower on top of the capsule that yanks the crew clear of a failing vehicle. The command normally ran through wiring from the ground to the rocket. Here the fire burned through that wiring, and Titov and Strekalov had no controls in the capsule with which to activate the system themselves.

Why the normal abort could not save them

This is the part the “lucky escape” version hides. The controllers were not simply slow or panicked. The normal path for triggering the escape system had been disabled by the same fire it was meant to protect the crew from.

What remained was a backup radio command. As space writer Ben Evans describes it, “The only chance to override it was to use a backup radio command.” That command required a pair of controllers to press their buttons within five seconds of one another.

The five-second window

The procedure required two independent inputs. Launch director Alexei Shumilin and rocket technical leader Aleksandr Soldatenkov separately issued the abort code word, “Dnestr.” At the remote control station, operators Shevchenko and Mochalov then had to press their buttons within five seconds of one another. According to a later reconstruction by Dwayne Day and space historian Asif Siddiqi, Mochalov made the window with about one second to spare.

A one-person abort would have been simpler and faster. It would also have created a greater risk of an accidental firing. The dual-input requirement was a safeguard against a false trigger. The five-second rule was not improvised on the night; it was part of the abort procedure.

Seconds to spare

When the radio command went through, the escape tower fired. It tore the crew capsule off the top of the burning rocket, subjecting Titov and Strekalov to forces commonly reported at roughly 14 to 17 times normal gravity for several seconds. The booster then collapsed and exploded only a few seconds later; accounts differ on the exact interval, with estimates ranging from about three or four seconds to six.

Titov later recalled the moment: “We could feel the booster swaying from side to side. Then there was a sudden vibration and a jerking sensation as the LES activated.” His blunter summary, in a later interview, was simply: “We were swearing!”

The capsule came down about 4 km from the pad, and both men survived without serious injury. The wreckage kept burning for around 20 hours. Mission records commonly give the aborted flight, from tower firing to landing, as 5 minutes and 13 seconds. Titov and Strekalov later called 26 September their second birthday.

Why the rescue is misread

This remains the only time a launch escape system has been used on the pad with a crew aboard, which is part of why it gets told as a near-miracle. Read as a story of heroism and luck, it flatters the people and skips the system. Read against the record, the more striking part is what the two-controller rule reveals: the normal abort path had a radio backup, and that backup itself had safeguards against accidental activation.

The luck was real. The fire could have reached the capsule sooner, and the controllers could have missed the window. What the five-second rule shows is that the backup they were racing was deliberately difficult to trigger by mistake — and still worked on the one night it mattered.