Oroville Dam Spillways — Slab Uplift Over Weathered Rock Forced 188,000 to Flee
Summary
On 7 February 2017 the gated flood-control spillway at Oroville Dam — the tallest dam in the United States, on the Feather River in Butte County, California — failed under a routine flood release when water forced its way beneath the concrete chute and tore a crater hundreds of feet across out of the structure and the hillside below. No one died, but five days later the cascade of consequences nearly killed many: with the main spillway destroyed, rising water spilled for the first time over the dam's ungated emergency spillway, the unlined earth slope eroded headward toward the concrete weir within hours, and on 12 February officials ordered the emergency evacuation of communities downstream. By 13 February some 188,000 people had fled. The cause was not flood, earthquake, or overtopping of the dam itself. It was a thin concrete slab built over poor-quality, weathered foundation rock and a drainage system that, instead of relieving water pressure, helped trap it.
The dam, completed in 1968 and operated by the California Department of Water Resources (DWR), rises about 770 feet of compacted earthfill. Its flood-control spillway is a separate structure: a long, gated concrete chute carrying releases down the right abutment to the Feather River. On 7 February, with the chute discharging roughly 52,500 cubic feet per second, operators noticed an abnormal flow pattern and, on inspection, found a section of the slab gone and a hole eroded into the chute and its foundation. The mechanism was textbook in retrospect: high-velocity water injected through cracks and joints into the thin slab generated uplift pressure beneath it that exceeded the slab's weight and anchorage; once a panel lifted out, the high-velocity flow reached the moderately- to highly-weathered rock beneath, which scoured catastrophically and undercut adjacent panels in a runaway progression.
The Independent Forensic Team (IFT), assembled at the request of FERC and DWR and chaired by John France, released a 584-page report on 5 January 2018. It found no single villain. Instead it diagnosed a "long-term systemic failure" of DWR, of regulators, and of general dam-safety practice over fifty years to recognise and correct weaknesses baked into the spillway's original design and construction — a chute slab too thin where underdrains ran beneath it, anchors too short into weak rock, a foundation mischaracterised as competent bedrock, and decades of cracking and repair treated as cosmetic rather than symptomatic.
Oroville produced no fatalities and did not breach the dam, yet it became one of the most consequential dam-safety events in American history. Repairs exceeded $1.1 billion, the IFT report rewrote how spillways are inspected and judged, and the case stands as the canonical demonstration that a spillway chute is a foundation-and-drainage problem, not merely a slab of concrete.
---
Timeline
The Build: A Thin Slab on Weak Rock With Drains That Trapped Water
Oroville Dam was conceived in the early 1960s as the keystone of California's State Water Project and built by the state's own engineers at DWR. The dam — an earthfill embankment rising about 770 feet — was, and remains, the tallest in the United States. Its flood-control function lived not in the dam but in a separate, gated concrete chute on the right abutment, designed to carry large releases down a steep slope to the Feather River. A second, ungated emergency spillway stood alongside it: a concrete overflow weir discharging onto a bare earth-and-rock hillside, intended only as a last resort for extreme floods and, in nearly half a century of operation, never once used.
Two decisions made during design and construction set the stage for 2017. The first concerned the underdrain system meant to relieve water pressure beneath the chute. Rather than trench the drain pipes into the foundation below the slab, the builders ran them through the lower part of the slab itself, locally thinning the concrete to accommodate them. The drainage network thus became a plane of weakness threaded through the very element it was supposed to protect, and a conduit that, under the wrong conditions, could deliver pressurised water to the slab's underside instead of carrying it away. The second decision was to anchor the slab and seat the structure on foundation rock that was, in places, moderately to highly weathered — poor-quality material that the design treated as if it were competent bedrock. Anchors were too short and too sparse for rock that strong, and far too generous for the rock that was actually there.
The warning came at once. Cracks opened in the chute slab almost immediately after construction, concentrated above and along the underdrain pipes, and the underdrains ran heavily from the start. These were not random defects; they were the structure announcing the exact flaw that would later destroy it. But the cracking was read as a maintenance nuisance. For five decades DWR sealed cracks and patched spalls, and FERC's periodic reviews accepted the chute as serviceable. No one returned to first principles to ask whether a thin, cracked slab anchored into weathered rock could survive a hard, sustained release. The structure was never re-evaluated against the failure mode it had been signalling since the 1970s.
The Failure Sequence: Uplift, Ejection, and a Runaway Scour
The wet winter of 2017 finally asked the question. On the morning of 7 February, with the chute discharging roughly 52,500 cubic feet per second — a substantial but not extreme release — operators saw the flow behaving abnormally and closed the gates to look. A section of the slab was simply gone, and a crater had been eroded into the chute and the foundation rock beneath the steep mid-chute reach.
The mechanism was hydraulic and unforgiving. Where joints and cracks in the slab were offset, fast-moving water no longer skimmed over the surface; it was driven down into the cracks, decelerated against the offsets, and converted its velocity into stagnation pressure beneath the slab. That under-slab water pressure, augmented by the compromised underdrains delivering more flow than they could remove, generated uplift forces. Once those forces exceeded the slab's weight and the holding capacity of its corroded, undersized anchors, a panel lifted out of the chute. That was the irreversible step. With one panel gone, the high-velocity flow poured directly onto the moderately- to highly-weathered rock and soil-like material beneath — material that scoured violently under such flow, undercutting the edges of adjacent panels, ejecting them in turn, and driving the crater wider and deeper with every cubic foot released.
DWR now faced an impossible choice. The reservoir was rising in a wet winter and had to be lowered, but every release through the wrecked chute enlarged the hole. When operators throttled back to limit chute damage, the reservoir climbed until, shortly after 08:00 on 11 February, water crested the emergency spillway for the first time in the dam's history. The unlined hillside below the weir eroded far faster than the design had ever assumed, and the erosion advanced headward — uphill — toward the concrete weir itself. If that weir were undercut and collapsed, a wall of stored water could be released uncontrolled. On 12 February the evacuation order went out; by the 13th about 188,000 people had fled. To save the emergency weir, operators reopened the ruined main chute and pushed flow toward 100,000 cfs, accepting enormous damage to draw the reservoir below the emergency weir. It worked. The dam held, the weir survived, and on 14 February the order was downgraded.
The Reckoning: No Single Cause, a Fifty-Year Systemic Failure
The Independent Forensic Team — recommended by ASDSO and USSD, accepted by FERC and DWR, and chaired by John France — investigated for nine months and published a 584-page report on 5 January 2018. Its central finding was unusual and pointed: there was no single root cause. The incident was the product of a "long-term systemic failure" of DWR, of its regulators, and of general dam-safety practice to recognise and correct inherent weaknesses in the spillway's design and construction, the poor quality of the foundation rock, and the deteriorated state of the chute — over a span of fifty years.
The physical chain was clear: water injected through cracks and joints, uplift exceeding the thin slab's capacity, a panel ejected, and weathered rock exposed to a scour that fed on itself. But the IFT refused to stop there, because every one of those physical facts had been knowable and, in the cracking of the 1970s, visible. The slab had been built too thin over its drains; the anchors and foundation had been mismatched to the rock; the underdrains had been a liability rather than a safeguard; and the chronic cracking had been managed as cosmetic for decades. The report described DWR, the owner of the tallest dam in the United States, as having grown "somewhat overconfident and complacent" about its own engineering. The lesson was institutional as much as geotechnical: a robust dam-safety culture must treat persistent symptoms as evidence of a mechanism, and must periodically re-examine old structures against the failure modes they keep hinting at — not merely repair the surface and renew the assumption that the design was sound.
---
Contributing Factors
Aftermath
Oroville killed no one and never breached the dam, but it forced roughly 188,000 people from their homes and cost more than $1.1 billion to repair, with the main spillway rebuilt by November 2018 and the emergency spillway fortified with a buttressed concrete splash pad and a secant-pile cutoff wall to arrest headward erosion. The Independent Forensic Team's January 2018 report became a reference document for the profession: it pushed FERC and dam owners toward comprehensive, risk-informed periodic spillway reviews that scrutinise foundation quality, underdrain performance and slab anchorage rather than surface condition alone, and it elevated the treatment of spillway chutes as foundation-and-hydraulic systems where uplift, not concrete strength, governs survival. Above all the case became the byword for institutional complacency at the top of an industry — the cautionary phrase that even the owner of the tallest dam in the United States could be "overconfident and complacent," and that a structure cracking the same way for fifty years was telling its owners exactly how it would one day fail.
---
Lessons
- Design and seat a spillway chute against uplift, not just flow: size the slab, anchors and joints so that under-slab pressure can never exceed the forces holding the slab down, and trench drains below the slab rather than weakening it to fit them.
- Investigate and classify the foundation rock honestly: never treat weathered, erodible material as competent bedrock, and detail anchorage and scour protection for the rock that is actually present, not the rock the design assumed.
- Treat persistent symptoms as a mechanism, not maintenance: when a structure cracks the same way for decades, return to first principles and re-evaluate it against the failure mode the cracking implies — do not patch and renew the assumption of soundness.
- Prove every emergency or last-resort element before you rely on it: an ungated spillway on bare ground that has never carried water is an untested assumption; line, armour, or analyze its erosion behaviour as if your worst day depends on it.
- Guard against institutional overconfidence: the larger and more reputable the owner, the more deliberately it must invite independent, risk-informed review — complacency, not flood, is what destroyed the most heavily defended spillway in the country. ---
References
- [Oroville Dam crisis]( — Wikipedia
- Independent Forensic Team Report: Oroville Dam Spillway Incident (5 January 2018)
- Oroville Dam (California, 2017) — Dam Failures and Lessons Learned
- What Really Happened at the Oroville Dam Spillway?
- [Forensic team release final report on Oroville dam spillway]( — International Water Power & Dam Construction