The Boeing 737 MAX was the latest version of Boeing’s best-selling narrow-body jet, fitted with larger, more fuel-efficient engines mounted further forward and higher on the wing. That change altered the aircraft’s handling, and Boeing added a software function called the Maneuvering Characteristics Augmentation System (MCAS) to make the MAX feel, to pilots, like earlier 737s. MCAS could automatically push the aircraft’s nose down by moving the horizontal stabilizer.
On October 29, 2018, Lion Air flight 610, a 737 MAX 8 registered PK-LQP, crashed into the Java Sea shortly after takeoff from Jakarta, killing all 189 on board. As the NTSB summarized, “On October 29, 2018, Lion Air flight 610, a Boeing 737 MAX 8, PK-LQP, crashed in the Java Sea shortly after takeoff from Soekarno-Hatta International Airport, Jakarta, Indonesia.” Indonesia’s KNKT (Komite Nasional Keselamatan Transportasi) led the investigation. Less than five months later, on March 10, 2019, Ethiopian Airlines flight 302, a 737 MAX 8 registered ET-AVJ, crashed shortly after takeoff from Addis Ababa, killing all 157 on board. Across the two accidents, 346 people died.
Both investigations traced the same mechanism. MCAS took its input from a single angle-of-attack (AOA) sensor. When that one sensor fed erroneously high readings - on the Lion Air aircraft, a recently installed AOA sensor was miscalibrated - MCAS concluded the nose was too high and commanded repeated nose-down trim. The crews fought a system they had not been told existed, and the aircraft was driven into the ground. A flight-control function with the authority to push the nose down was wired to a single, unredundant point of failure.
The US House Committee on Transportation and Infrastructure conducted an 18-month investigation and released a final committee report on the design, development, and certification of the 737 MAX. It documented what it called a culture of concealment and faulty technical assumptions, including that Boeing’s own data showed a test pilot took more than ten seconds to diagnose and respond to uncommanded MCAS activation in a simulator, while certification guidelines assumed pilots would react within four seconds. The committee also found that the FAA’s practice of delegating certification work to Boeing employees created conflicts of interest.
The 737 MAX was grounded worldwide beginning in March 2019 and remained grounded for roughly 20 months, one of the longest groundings of a major airliner in commercial aviation history. The aircraft returned to service only after MCAS was redesigned to compare both AOA sensors, to activate only once rather than repeatedly, and to leave the pilots more authority to override it. The episode became a defining modern case study in how safety-critical software, automation that pilots cannot see, and a single point of failure can combine catastrophically.
The case is studied alongside frameworks like the Swiss cheese model and normal accident theory, which describe how multiple latent weaknesses - in design, certification, training, and maintenance - can line up to produce disaster. It remains one of the most consequential software-and-systems failures in the history of computing applied to safety-critical machines.