REVERSE ENGINEERING MY CLOUD-CONNECTED E-SCOOTER AND FINDING THE MASTER KEY TO UNLOCK ALL SCOOTERS

Summary from the TLDR InfoSec newsletter

The Äike electric scooter relies entirely on a cloud-backed mobile app for locking, unlocking, and other controls, which becomes risky once the manufacturer goes bankrupt and services degrade. By reverse engineering the Android app, using Frida to intercept BLE GATT traffic and Java hashing calls, the author uncovers a SHA-1–based challenge-response that incorrectly uses a global default key rather than a unique per-device secret. With this knowledge, any nearby Äike scooter can be authenticated to and remotely commanded via a short Python proof-of-concept using Bleak.