in case of small leakages in the reactor cooling loop, four high-pressure injection pumps (one for each cooling loop and a fourth as reserve) would replace the missing water. in case of fast loss of the coolant, six accumulator tanks with a total 3·100% redundancy would flood the reactor until the low-pressure injection pumps could start operation. these four pumps are subdivided in three loops, plus an additional loop in form of a crosstie in direction of the other three loops.