Hyrox paid in apologies. The UK fine range is £2.6m to £10m.

Moritz Fürste, co-founder of Hyrox, said it plainly: "In the end it is my job to foresee these potential incidents – and I did not." That admission followed a race in Beijing where an elite competitor was allowed to continue and win despite an unforeseen situation mid-race, leaving shared equipment and track surfaces contaminated for more than 1,000 subsequent participants. Hyrox China then offered full refunds to affected athletes and the governing body rewrote its rulebook within days.

No fine was issued. No prosecution followed. But the refunds, the rule change and the public apology all landed on the organiser's desk because one written duty had no named owner and no evidence trail. If you run a mixed-use development that hosts events, that is the exposure sitting in your portfolio right now.

The duty that existed before the incident, and the gap nobody filled

Hyrox already penalised athletes for spitting, littering and clearing their nose on the course. The rulebook covered minor infractions in detail. What it did not contain was any immediate protocol for contamination, blood, vomit or urine. As Fürste put it, protocols designed for elite competition and mass participation "became blurred, creating ambiguity in how they were applied and understood."

That is the pattern I see in mixed-use developments. The fire risk assessment covers ignition sources, escape routes and occupancy. The event plan covers stewarding and evacuation codes. What nobody writes down is the decision chain for a contamination event, a medical withdrawal, or a welfare call that sits between the organiser's race director and the venue operator's building manager. When it happens, two people look at each other and neither has the authority in writing.

For a head of property, the question is not whether your events team could handle a spill. It is whether the person on site at 2.40pm on a Saturday has a written instruction that names them as the decision-maker, and whether that instruction is dated, signed and filed where an inspector or insurer can find it.

What the regulator relies on when an event goes wrong

Fire and rescue authorities do not wait for a fire to ask for your event documentation. The Shropshire Fire & Rescue Service guidance for organising events is explicit: a fire safety strategy and an emergency and evacuation plan are a requirement under fire safety legislation, and the event organiser and the owner of the property where the event is staged both carry a duty of care for public safety before, during and after the event. That duty extends to employees, contractors, volunteers and the visiting public.

Foreseeability is where that admission lands in law. Under the Sentencing Council's definitive guideline, in force since February 2016, a large organisation — one with turnover above £50m — convicted in the most serious harm and culpability category faces a fine range of £2.6m to £10m, with a £4m starting point. The court reaches that figure by asking what the organisation foresaw, what it wrote down, and who was named to act on it. An apology is not one of the inputs.

In a mixed-use development, that means the ground-floor event space, the shared circulation routes, the service yard used as a marshalling area and the residential cores above the venue all sit inside the same assessment. The London Fire Brigade's guidance for crowded venues adds the operational detail inspectors look for: maximum occupancy against the premises licence, escape routes kept clear and accessible, staff trained in evacuation and shepherding, and a fire risk assessment that reflects how the venue actually operates during busy nights and special events.

Hyrox China isolated affected lanes, disinfected equipment and replaced venue carpet overnight. That is the right operational response. It is not evidence of a written duty. The evidence is the document that said who would make that call, and when.

Where mixed-use developments fail the same audit

The failure mode is rarely a missing fire extinguisher. It is a missing name. In a mixed-use scheme, the event organiser holds the race licence, the venue operator holds the premises licence, and the building's accountable person holds the fire safety order duties for the common parts. Three parties, three sets of paperwork, and no single document that says who withdraws a participant, who closes a lane, who authorises a deep clean, and who signs off the reopening.

When an inspector or an insurer asks for the event risk assessment, they are not reading intentions. They are checking whether the document names the decision-maker, whether it was reviewed when the layout or the capacity changed, and whether the staff on duty that day had been trained against it. If the answer is that the race director made a judgement call in the moment, you have the Hyrox position: a defensible human decision with no written authority behind it.

The practical fix is unglamorous. Add a contamination and medical withdrawal protocol to the event risk assessment. Name the role, not the person, who can stop the event. Record the review date. Keep the training log with the assessment. Then check that the same document exists for every event space in the portfolio, not just the flagship. For a deeper look at how written duties and evidence trails hold up under scrutiny, see our article on how the Fire Safety Act 2021 reshapes multi-occupied building deals.

Your 60-second self-check

• Could you produce the current event risk assessment for every venue in your portfolio that hosted a public event in the last twelve months, with a review date inside the last year?
• Does that assessment name the role authorised to withdraw a participant or stop an event on medical or contamination grounds, and is that role on site during events?
• Could you show the training record for the staff who were on duty at your last event, against the procedures in that assessment?

If you cannot answer all three with confidence, you are carrying the same exposure Fürste described. The free 5-minute Director's Risk Check shows you which statutory deadlines and penalties apply to your portfolio, each with its official source, so you can see the breach exposure before an inspector or an insurer does. Run the check here and send it to the colleague who holds the event paperwork.

Herman's verdict

A refund is cheap. A rule change is cheap. What Hyrox could not buy back was the hour when nobody had written authority to stop the race. If your event risk assessment does not name the person who can stop the event, you have not assessed the risk — you have described the venue.

— Herman