Xiaomi's Electronic Doors Locked a Driver Inside a Burning Car
What happened
Around 3 am on an October night in Chengdu, China, a Xiaomi SU7 Ultra struck another vehicle and a roadside barrier before skidding into a median and catching fire. Bystanders rushed to the car as flames spread, but the doors would not open. The driver, a 31-year-old man identified as Deng, was trapped inside while the cabin filled with smoke and fire. Firefighters later recovered his remains. Police opened an investigation and said early evidence suggested the driver had been under the influence of alcohol, though the full inquiry was ongoing.
The doors were the specific failure. The SU7 Ultra uses flush electronic door handles that require powered actuators to deploy from the body panel. When the car's electrical system failed in the crash sequence, those handles locked flat. Witnesses and rescuers standing outside the burning vehicle had no mechanical grip to pull, no physical latch to force. The fire engulfed the cabin within minutes. Whatever the driver did or did not do in those moments, he had no working mechanism to exit, and neither did anyone trying to reach him from outside.
The incident landed in a context Xiaomi was already navigating. Several SU7-related crashes had drawn public and regulatory attention in the preceding months, including one in which investigators found that the car's driver assist system disengaged moments before impact in a fatal collision. Each incident by itself could be argued as an edge case. A pattern of automation-adjacent fatalities is harder to frame that way.
The police framing, focused on suspected impairment, does not answer the design question. A vehicle's emergency egress must function after a crash even when the electrical system does not, because fire follows impact precisely in the scenarios where occupants most need to exit quickly. Mechanical door releases, interior and exterior, exist in other vehicle classes for this reason. The SU7 Ultra's flush handle system, built to optimize the car's aerodynamic profile and visual appeal, removes the exterior mechanical fallback entirely. That is a deliberate tradeoff. It became lethal when the power went.
No current standard requires a manufacturer to demonstrate that a smart car's emergency exit works without electrical power before the car reaches the market. There is no mandated test log, no certification record, no provable record of what a system did in the moment between impact and flame. That absence is where accountability infrastructure would close the gap, by requiring that every safety-critical path be tested, logged, and verifiable before it meets a road, rather than reconstructed after the fact from a coroner's report.
Reported impact
- Affected parties
- Not publicly disclosed
- Harm type
- Not publicly disclosed
- Scale
- Not publicly disclosed
- Financial impact
- Not publicly disclosed
- Regulatory action
- Not publicly disclosed
Classification
Relevant governance controls
Governance control mapping is not available for this record.
- No controls mapped
Not publicly disclosed
Control mapping is analytical. It does not state that any control would have prevented the incident.
Sources and evidence
This record was researched and written by the Index. The event is also catalogued in the following database, which is listed for cross-reference.