January 24, 1961.

Strategic Air Command had been flying continuous nuclear airborne alert missions since the late 1950s. The program, eventually formalized under the name Chrome Dome, ran on a single premise: if a Soviet first strike destroyed American airbases on the ground, the bombers already in the air could still retaliate. B-52 bombers loaded with live thermonuclear weapons flew predetermined routes around the clock, always airborne, always armed. They launched from bases across the country, flew loops lasting upward of twenty-four hours, refueled from KC-135 tankers in mid-flight, and returned. The next crew went up. The cycle never broke.

At any given hour, multiple nuclear-armed B-52s were airborne over North America and the North Atlantic. The routes crossed over cities, suburbs, and farmland. Millions of people lived beneath them. The program was not announced to the public.

Seymour Johnson Air Force Base sat just outside Goldsboro, North Carolina, in the flat tobacco country of Wayne County. The 4241st Strategic Wing flew B-52G Stratofortresses out of the base on regular Chrome Dome rotations. Crews took off, flew their loops, refueled, and came home. They carried weapons capable of leveling a city. The work ran on a schedule like any other military rotation, except for what was bolted inside the bomb bay.

Chrome Dome sorties flew in every season and in nearly every kind of weather. The routes carried bombers over populated areas because the flight paths followed the most direct arcs toward their assigned Soviet targets. A single sortie could cross over multiple states. The men who flew the routes had been at it for years.

On the morning of January 23, 1961, a B-52G departed Seymour Johnson on a standard airborne alert sortie. The aircraft carried two Mark 39 thermonuclear bombs. Each had a yield in the megaton range, hundreds of times the power of the weapon dropped on Hiroshima. The Mark 39 was built with four independent arming mechanisms, layered safeguards engineered to prevent accidental detonation. All four had to activate in sequence before the weapon could fire. The system was designed for redundancy. It had never been stress-tested by the full structural breakup of the carrying aircraft.

The crew of eight settled in for the flight. The route was familiar, the night cold, the checks routine. The weapons in the bomb bay were locked behind their safety mechanisms. None of the crew had reason to expect anything but a long, uneventful loop over the Atlantic and a landing at Goldsboro the following afternoon.

After midnight, the bomber rendezvoused with a KC-135 tanker for scheduled midair refueling. The two aircraft linked up at altitude, fuel flowing through the boom into the B-52's tanks. During the transfer, the tanker crew saw something the bomber crew had not yet noticed. Fuel was streaming from the B-52's right wing, visible even in the darkness. The bomber crew confirmed it. A structural leak, and a serious one. Fuel was leaving the right wing faster than the tanker could replace it.

The crew broke off refueling and radioed the base. Instructions came back: fly a holding pattern near Seymour Johnson, burn off fuel to a safe landing weight, prepare for an emergency approach. Standard procedure for a fuel emergency. The B-52 began to orbit. Below, the farms of Wayne County were dark. Goldsboro was quiet. The leak did not slow. In minutes, the aircraft lost thousands of gallons. The right wing was draining.

A fuel leak, even a severe one, was a survivable emergency. The procedure was to reduce weight, descend, and land as quickly as conditions allowed. Nothing in the crew's training suggested the airframe would come apart. The wing was supposed to hold.

The structural failure came without warning. The right wing suffered a structural failure and separated from the fuselage. The B-52G broke apart at altitude over the farmland and woods north of Goldsboro. Debris scattered across the countryside. Five of the eight crew members survived. Three were killed.

As the airframe disintegrated, the two thermonuclear weapons separated from the bomb bay and fell toward the ground on different paths.

The first bomb came down under its parachute. The drogue and main canopy deployed in sequence, the same deployment the weapon was designed to follow in a deliberate wartime drop. The bomb descended through the dark over the farmland and came to rest in a stand of trees near the community of Faro, about twelve miles north of Goldsboro. It hung from the branches, nose pointed at the ground, its casing intact.

The second bomb fell without a functioning parachute. It dropped freely, struck a waterlogged tobacco field at enormous speed, and broke apart on impact. Fragments of the casing and conventional explosives scattered across the mud. The weapon's heavy thermonuclear secondary, the component that generated the bomb's main destructive force, punched deep into the saturated soil and kept going.

The two sites were separated by a stretch of farmland. At the first, the parachute was still draped in the tree canopy, the weapon hanging beneath it. At the second, the only visible evidence was a gouge in the field and scattered metallic debris. The heaviest components of the bomb had buried themselves completely.

By first light, Air Force recovery teams were on the ground. Lt. Jack ReVelle, an explosive ordnance disposal officer, was among those who reached the first bomb in the tree line. His team began the work of assessing the weapon, examining its arming mechanisms one by one.

The breakup of the aircraft had triggered the bomb's arming process on the way down. As the weapon separated from the disintegrating bomber and descended under its parachute, it moved through its detonation sequence step by step, as though it had been deliberately released over a target. Three of the four arming mechanisms had engaged. The trigger charging system had activated. The detonator batteries had fired. The weapon had armed itself through nearly every stage of its firing sequence.

One mechanism had held. The arm-safe switch, a low-voltage electromechanical device, had stayed in the safe position. It was the last step before detonation. It was the only step remaining.

That single switch had prevented a full thermonuclear explosion over rural North Carolina.

A detonation at megaton yield would have destroyed Goldsboro and everything for miles around it. Blast overpressure would have leveled structures far beyond the fireball. Radioactive fallout, depending on wind and weather, could have spread across eastern North Carolina, into Virginia, and toward the cities of the mid-Atlantic seaboard. Raleigh, the state capital, sat less than seventy miles to the west.

The second bomb presented a different problem. Its casing had shattered. Its conventional explosives had scattered without triggering a nuclear chain reaction. But the thermonuclear secondary and its fissile material had driven deep into the swampy ground. Recovery crews dug. They found fragments at various depths. The core kept sinking in the waterlogged earth. The water table rose as fast as they could excavate. They went dozens of feet down. They did not reach it.

The Air Force made a decision. The thermonuclear material would stay in the ground. The military acquired an easement on the farmland and placed it under permanent restriction. The surrounding fields remained in agricultural use. The plot of earth above the buried component became a government-controlled exclusion zone.

In the days after the crash, the Air Force acknowledged publicly that a B-52 carrying nuclear weapons had broken apart in flight over North Carolina. Official statements described the incident in measured terms. The weapons had been recovered. Safety systems had functioned as designed. There had been no danger of nuclear detonation. The statements said nothing about three of four arming mechanisms failing. They said nothing about a single switch. They said nothing about a thermonuclear core still underground in a farmer's field.

The incident was designated a Broken Arrow, the military's term for an accident involving a nuclear weapon. The details were classified.

In 1969, a Sandia National Laboratories engineer named Parker F. Jones completed an internal review of the Goldsboro accident. He examined the state of the first bomb's arming mechanisms in forensic detail, tracing the activation sequence from the moment the weapon left the aircraft to the moment it was recovered in the trees. He concluded that a single low-voltage switch, a simple piece of dynamo technology, had been the sole remaining barrier to detonation. The report was classified and filed within the weapons establishment. It was not shared with the public, the press, or Congress.

For more than four decades, the Air Force's public position held. There had been no real danger. The safety systems had worked. The incident was closed.

In 2013, journalist Eric Schlosser obtained the Jones report through a Freedom of Information Act request. He was researching nuclear weapons accidents for his book on the subject. The 1969 Sandia document was made public for the first time, more than fifty years after two thermonuclear bombs fell on North Carolina.

The Air Force attributed the crash to structural failure and implemented modifications to the B-52G fleet. Changes were also made to nuclear weapon arming systems in subsequent designs.

The Chrome Dome airborne alert program continued for seven more years. B-52s flew their nuclear-armed routes over the continental United States until January 1968, when a Chrome Dome bomber crashed near Thule Air Base in Greenland, scattering plutonium across the Arctic ice. The airborne alert program was terminated that year.

The thermonuclear secondary of the second Mark 39 bomb was never recovered. It remains in the ground, beneath a plot of farmland north of Goldsboro, where it has been since the night the wing came off.