Thermal runaway is the chain reaction inside a lithium cell where internal temperature rises faster than it can dissipate — eventually triggering electrolyte decomposition, gas generation, and in the worst case, venting or fire. It is always the result of one of three triggers: mechanical, thermal, or electrical abuse. Design against all three and you’ve covered nearly every real-world failure mode.

Trigger 1: mechanical abuse

Crush, puncture, or severe bending creates an internal short by collapsing the separator between electrodes. Current density at the short point spikes, temperature climbs, and within seconds you’re in a self-sustaining exotherm.

Design choices that help:

  • Cell mounting with compliant layers. A 0.2–0.5 mm foam pad between the cell and rigid housing distributes load during a drop.
  • Metal cages around high-density cells. A thin aluminium shroud can prevent direct puncture by screws or internal PCB corners.
  • Orientation matters. Tabs are the mechanically weakest point; orient them away from likely impact axes in the device housing.

Trigger 2: thermal abuse

Cell internal temperature above approximately 130 °C begins to decompose the SEI layer. Above 150 °C, separator shutdown usually activates — the polyethylene or polypropylene melts and closes its pores, stopping ion flow. Above 180 °C the separator itself can shrink, exposing large areas of anode and cathode to direct contact.

Sources of external thermal abuse in the field:

  • Device left in a closed car in summer (interior can exceed 70 °C).
  • Charging with a defective charger that fails to taper.
  • External heat source — industrial environments, engine bays, direct sunlight on dark enclosures.

The design response is layered: a ceramic-coated separator that withstands 180–200 °C before shrinkage, a thermal fuse in the BMS that opens at 85–90 °C, and a mechanical design that dissipates heat away from the cell rather than trapping it.

Trigger 3: electrical abuse

Over-charge is the most dangerous electrical condition. Driving a cell above its nominal voltage (typically 4.2–4.25 V for LCO) causes lithium plating on the anode and oxygen release from the cathode — both feed thermal runaway.

Multiple layers of protection are standard:

  1. Charger IC voltage accuracy. Primary defence — modern charger ICs hold cut-off within ±0.5% of target.
  2. Protection PCM on the cell. Secondary defence — typically cuts at 4.28 V (a few tens of millivolts above nominal cut-off).
  3. Secondary protection IC. Tertiary defence — latches off at roughly 4.35 V, usually with a fuse that must be manually reset or replaced.
  4. Current interrupt device (CID). Passive mechanical disconnect inside the cell, triggered by internal pressure from gas generation.

Separator shutdown and venting

Two cell-internal safety features deserve a closer look.

Separator shutdown is a temperature-activated safety: when the separator melts at its design threshold, ion transport between electrodes stops, and the cell can no longer sustain reaction. It works once — the cell is dead afterwards — but it prevents escalation to fire in most mild overheats.

Vent design is the last-resort safety: a deliberately weak point in the pouch or can that opens to release gas pressure before the cell ruptures uncontrollably. A good vent opens at a defined internal pressure (around 1.0–1.5 MPa for most pouch cells), exhausts sideways, and does not project flame toward critical device components. Pack designers should leave a defined “vent alley” in the enclosure — an open path for ejected gas to reach the outside.

Cell spacing in multi-cell packs

In packs with more than one cell, the thing you’re trying to prevent is propagation — one cell going into runaway and igniting its neighbours. Three practices help:

  • Thermal barriers between cells. Aerogel or intumescent materials 1–3 mm thick can buy enough time for surrounding cells to cool.
  • Spacing. 2–5 mm of air gap between cells drops heat flux by roughly 60–80%.
  • Directional venting. All cell vents pointing the same way, into a channel that exhausts out of the pack.

BMS early-warning signals

A smart BMS can detect the precursors to runaway minutes before the event:

  • Rapid voltage drop under light load — indicates internal soft short.
  • Temperature rise not correlated with load — indicates parasitic reaction.
  • Impedance spike on periodic pulse test — indicates SEI breakdown.

None of these are catastrophic on their own, but all three together are a reliable signal to disable charging and log the event. A product that quietly retires a suspect cell and prompts the user to replace the battery is better than one that lets the cell keep cycling toward a failure.