Supply system (250, 350) for an aircraft including first and second dihydrogen tanks (110a-b) and at least one engine, said supply system (250, 350) including: - a supply module (249, 349) including a first outlet pipe, a second outlet pipe, for each tank (110a-b), a feed pipe (251a-b) intended to be fluidically connected to said tank (110a-b) and means arranged to channel dihydrogen from the feed pipes (251a-b) to alternatively the first outlet pipe or the second outlet pipe and, when dihydrogen is channelled to the first outlet pipe, to channel dihydrogen coming from the second outlet pipe to the first outlet pipe, - a first heater, - a second heater, - a main pipe passing through the first heater and the second heater and fluidically connected between the first outlet pipe and the engine, along which there are installed, on the one hand, between the first heater and the second heater, a first three-port solenoid valve and a second three-port solenoid valve with a non-return valve disposed between the first solenoid valve and the second heater, and, on the other hand, between the second heater and the engine, a third three-port solenoid valve and a fourth three-port solenoid valve with a non-return valve disposed between the third solenoid valve and the engine, where the second solenoid valve allows flow from the first heater to the second heater but prevents flow from the second solenoid valve to the first heater, where the fourth solenoid valve allows flow from the second heater to the engine but prevents flow from the fourth solenoid valve to the second heater, - a first branch pipe fluidically connected between the second outlet pipe and a port of the second solenoid valve, - a second branch pipe fluidically connected between a port of the first solenoid valve and a port of the fourth solenoid valve, - detection means intended to detect a leak of hydrogen on each pipe and each heater (152, 154), to detect a malfunction of a heater (152, 154) or a solenoid valve and to deliver information representative of a leak of hydrogen or a detected malfunction, and - a control unit arranged to control opening and closing of each solenoid valve (201, 202, 203, 204) and the means of the supply module (249, 349) as a function of information delivered by the detection means. - a supply module (249, 349) including a first outlet pipe, a second outlet pipe, for each tank (110a-b), a feed pipe (251a-b) intended to be fluidically connected to said tank (110a-b) and means arranged to channel dihydrogen from the feed pipes (251a-b) to alternatively the first outlet pipe or the second outlet pipe and, when dihydrogen is channelled to the first outlet pipe, to channel dihydrogen coming from the second outlet pipe to the first outlet pipe, - a first heater, - a second heater, - a main pipe passing through the first heater and the second heater and fluidically connected between the first outlet pipe and the engine, along which there are installed, on the one hand, between the first heater and the second heater, a first three-port solenoid valve and a second three-port solenoid valve with a non-return valve disposed between the first solenoid valve and the second heater, and, on the other hand, between the second heater and the engine, a third three-port solenoid valve and a fourth three-port solenoid valve with a non-return valve disposed between the third solenoid valve and the engine, where the second solenoid valve allows flow from the first heater to the second heater but prevents flow from the second solenoid valve to the first heater, where the fourth solenoid valve allows flow from the second heater to the engine but prevents flow from the fourth solenoid valve to the second heater, - a first branch pipe fluidically connected between the second outlet pipe and a port of the second solenoid valve, - a second branch pipe fluidically connected between a port of the first solenoid valve and a port of the fourth solenoid valve, - detection means intended to detect a leak of hydrogen on each pipe and each heater (152, 154), to detect a malfunction of a heater (152, 154) or a solenoid valve and to deliver information representative of a leak of hydrogen or a detected malfunction, and - a control unit arranged to control opening and closing of each solenoid valve (201, 202, 203, 204) and the means of the supply module (249, 349) as a function of information delivered by the detection means.