eloic-8/dt78

DT78 Smartwatch Reverse Engineering

DT78

DT78 Smartwatch Reverse Engineering

Firmware

Analysis of the firmware using binwalk analysis

Firmware v8.05 and update procedure for iOS in chinese language here

By using Wireshark, nRF Connect app & an ESP32 board, I was able to decode the following commands, types

More info at this blog

Flash chip used in the watch - XT25F128B

Telegram

Join the telegram group DT78 Smartwatch

Notification test video

Custom app for relaying notifications Youtube

ESP32

Client

This arduino code dt78_ble_client creates a client on the ESP32 board that connects to the smartwatch

Control lights using the watch Video

Server

This arduino code dt78_ble_server creates a server on the ESP32 board that emulates the services and characteristics of the DT78 smartwatch and connect to the WearFit 2.0 app

Android App

Since this watch only supports notification from a few apps in the WearFit 2.0 app, I modified this code DT78-App-Android to send notifications to the watch