#369 1978 · William LeMessurier / Citicorp · Structural engineering / constructionattack-invisible-cost
The engineer who discovered his own finished skyscraper could collapse in an ordinary storm didn't hide it or panic publicly — he confessed to the client and had it secretly rebuilt around the people living inside it.
the problem
a professional discovers, only after delivery, that their own completed work has a critical, previously undetected flaw
background
Manhattan's newly completed Citicorp Center stood on four massive stilts positioned at the midpoints of its sides rather than the corners, an unusual design engineer William LeMessurier had calculated to withstand winds hitting the building's flat faces straight-on. Under standard 1970s New York building code, engineers were not required to check how a structure like this responded to quartering winds — gusts striking at a diagonal, toward a corner instead of a face — because that scenario was assumed to produce less stress than a direct hit.
Months after the tower opened and was fully occupied, a Princeton engineering student's question about quartering winds prompted LeMessurier to run the numbers out of curiosity, not obligation. He found that diagonal winds increased stress on the building's diagonal support braces by roughly 40 percent — and separately discovered that during construction, cost-saving had quietly changed the connections at those braces from welded joints to bolted ones, a substitution his own office had approved without fully re-checking its strength. Combined, the two facts meant the building's bolted joints could fail in a storm expected to strike New York roughly once every 16 years, with no meaningful warning before a partial collapse.
the move
Rather than conceal the flaw to protect his reputation, or go public and risk a panic evacuation of an occupied Manhattan skyscraper with no fix yet in hand, LeMessurier disclosed the defect directly to Citicorp's leadership and insurers within days, then designed and ran a night-shift welding repair — internally code-named Project SERENE — reinforcing all 200 vulnerable joints with steel plates while the tower stayed open and fully occupied during business hours.
the payoff
Welders worked through the night from August to October 1978, finishing the repair before the fall hurricane season fully arrived; contingency evacuation plans were quietly prepared but never used, including during a scare when Hurricane Ella threatened New York mid-repair before turning out to sea. The fix held, the building never failed, and the episode stayed almost entirely out of public view until a 1995 New Yorker article revealed it 17 years later — after which LeMessurier's decision to self-report was widely held up in engineering ethics teaching as the model response, rather than a career-ending admission.
what came after
The Citicorp Center crisis is now a standard case study in engineering ethics and structural failure courses, cited for showing that voluntary, immediate self-disclosure of a professional's own error — followed by a fast, quiet fix — can avert catastrophe better than either silence or public alarm, a template later echoed in software security's coordinated vulnerability disclosure and aviation's just-culture safety reporting.
filed under
references
- [1]Citicorp Center engineering crisisWikipedia, 2026en.wikipedia.org
- [2]A Potentially Disastrous Design ErrorDamn Interesting, 2010damninteresting.com