Firmware modification tools for the Onewheel Pint, Pint X and XR. Part of the R2Row ('Arturo') project.
- Node.js
- Yarn (optional)
# npm
npm patcher -f [input file] -o [output file] [...patches]
# or
# yarn
yarn patcher -f [input file] -o [output file] [...patches]
You'll find all patches you can use with the firmware patcher here. More to come soon.
Restores serial number and mileage after the flash has been wiped (required to disable Read Out Protection)
serialNumber
- (optional) 6 digit serial number preceded by OW (e.g. OW123456)mileage
- (optional) lifetime odometer reading in miles
Resolves Error 22 by removing the BMS serial ID check.
Converts Pint riding mode behavior into the equivalent for the XR
Changes for forward and backward angles for Elevated mode
elevatedAngle
- Angle above / below level for going forwards (up to +-32.00 degrees)elevatedBackwardAngle
- (optional) Angle above / below level for going backwards. Forward angle is used if not provided.
Changes the hold angle above level for Delirium / Skyline
deliriumSkylineAngle
- Angle above / below level for going forwards (up to +-32.00 degrees)deliriumSkylineBackwardAngle
- (optional) Angle above / below level for going backwards. Forward angle is used if not provided.
Allows Pint to toggle into custom shaping (untested, probably still needs some work)
- Firmware is not provided for copyright reasons. Instructions for dumping your Onewheel firmware are provided here. Warning: it's not for the faint of heart.
- Instructions to flash your Onewheel are located here. Thankfully, this is significantly easier than dumping the firmware to begin with.
# npm
npm run checksum:generate -- -i [input file]
# or
# yarn
yarn checksum:generate -i [input file]
The patcher uses the checksum of the firmware to set the offsets of each firmware patch.
If your firmware doesn't match a known checksum, open an issue for it. That way, we can find the offsets for that firmware revision and support more firmware.
- Firmware dumping process hasn't yet been tried for the GT. Since it uses an STM32F4, a different exploit needs to be written.
- This project is not affiliated with or endorsed by Future Motion. Proceed at your own risk - this will void your warranty.
If you're able to dump the firmware from a Onewheel that you own, you can use Ghidra to dive into the assembly and even live debug against a working Pint, Pint X, or XR. This can aid in finding more patches for the firmware.
datboig42069
on the Onewheel Discord for first verifying the firmware dump exploit from the research paper