Developer reverse-engineers Egret GT e-scooter, rewrites display firmware in Rust
A hobbyist took apart an Egret GT electric scooter, examined its Bluetooth app and firmware update mechanism, and discovered a way to bypass its PIN lock via a hidden firmware update mode. He also found the scooter silently transmits unlisted telemetry data, including driving-mode duration, motor current, battery voltage and charge history, and went on to write custom Rust firmware for the scooter's display unit.
GoKawiil's interpretation of the reporting above, not reported fact.
The findings expose a real security gap in a commercial e-scooter, where a simple button sequence can defeat the anti-theft PIN, and reveal that manufacturers may quietly collect far more usage and diagnostic data than they disclose to owners. It's also a notable example of hobbyist reverse engineering pushing consumer IoT hardware toward open, memory-safe firmware alternatives.
- The Egret GT's firmware update mode can be exploited to bypass its PIN-based lock.
- The scooter transmits undisclosed telemetry over Bluetooth, including battery and usage history.
- The author wrote replacement Rust firmware for the scooter's display unit after reverse-engineering it.
Source: bensimms.moe, 2026-09-10
Published there as: “Reverse engineering my e-scooter and rewriting the firmware in Rust”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.