1. Which SoC and Wi-Fi module does the LSPA2 plug use?
The production boards carry the CB2S module built around a BK7231N SoC. Even units marked “BK7231T” report CB2S/BK7231N once the Tuya partition is parsed [Elektroda, divadiow, post #21006763]
[BK7231N/BK7231T/CB2S] Tuya LSPA2 Wi-Fi Smart Plug 16A ЕС AU UK + 2.1A Dual independent USB
TL;DR
- Tuya LSPA2 Wi‑Fi Smart Plug 16A ЕС AU UK with 2.1A dual USB, independently controlled USB ports, is converted to OpenBK7231N firmware on a BK7231N chip.
- OpenBK7231N was installed with tuya-cloudcutter on a Raspberry Pi 3 using the '1.1.8 - BK7231N / oem_bk7231n_plug' exploit.
- GPIO 6, 7, 10, 24, and 26 are assigned to two relays, a toggle button, a master relay channel, and the Wi‑Fi LED.
- After flashing, the plug looks broken because LEDs and buttons stop responding, but it still works and can be configured at http://192.168.4.1/.
Generated by the language model.
A new version of a similar BSD31 smart socket. It differs in that both USB ports are controlled independently and the BK7231N chip is used, not T.
When buying, the firmware version 1.1.8 is installed on the smart socket.
I installed the OpenBK7231N firmware using tuya-cloudcutter installed on Raspberry 3 with Raspberry PI OS.
I chose hack "By firmware version and name": "1.1.8 - BK7231N / oem_bk7231n_plug"
or download last firmware file OpenBK7231N_UG_1.17.135.bin to /tuya-cloudcutter/custom-firmware and run:
sudo ./tuya-cloudcutter.sh -r -p "mirabella-genio-i004527-double-plug" -f "OpenBK7231N_UG_1.17.135.bin"Hacking occurs according to the instructions, from the second pass. After that, the device gives the impression of being broken, the indicators are not lit, the buttons are not pressed, but it is working. You can connect to the OpenBK7231N_MAC Wi-Fi network and configure the device by URL http://192.168.4.1/.
ClearIO // clear old GPIO/channels
lfs_format // clear LFS
StartupCommand "" // clear STARTUP
stopDriver * // kill drivers
backlog setPinRole 6 Rel; setPinChannel 6 1
backlog setPinRole 7 Rel; setPinChannel 7 2
backlog setPinRole 10 Btn_Tgl_All; setPinChannel 10 0
backlog setPinRole 24 Rel; setPinChannel 24 0
backlog setPinRole 26 WifiLED_n; setPinChannel 26 1
setChannelLabel 0 Plug
setChannelLabel 1 USB1
setChannelLabel 2 USB2
Flags 1024
{
"vendor": "Tuya",
"bDetailed": "0",
"name": "Wi-Fi Smart Plug 16A ЕС AU UK BRA + 2.1A Dual USB",
"model": "LSPA2",
"chip": "BK7231N",
"board": "TODO",
"flags": "1024",
"keywords": [
"TODO",
"TODO",
"TODO"
],
"pins": {
"6": "Rel;1",
"7": "Rel;2",
"10": "Btn_Tgl_All;0",
"24": "Rel;0",
"26": "WifiLED_n;1"
},
"command": "",
"image": "https://obrazki.elektroda.pl/1114790300_1686685394.jpg",
"wiki": "https://www.elektroda.com/rtvforum/topic3983684.html"
}
Comments
That's the first device with independent USB port control that I've ever seen. Have you considered using: setChannelLabel 1 USB1 to give them some better display names on UI? See our docs: https://github.com/openshwprojects/OpenBK7231T_App/blob/main/docs/commands.md Also,... [Read more]
setChannelLabel 1 USB1 setChannelLabel 2 USB2 setChannelLabel 0 Plug https://obrazki.elektroda.pl/3617296500_1686727717_thumb.jpg Added after 8 [minutes]: BK7231N_TuyaConfig_obk51F8744A.bin ... [Read more]
Here's what I extracted: Device configuration, as extracted from Tuya: - Relay (channel 3) on P7 - Pair/Toggle All Button on P10 - WiFi LED on P26 - Relay (channel 2) on P6 - Relay (channel 1) on P24 Device... [Read more]
https://aliexpress.ru/item/1005002741792619.html https://obrazki.elektroda.pl/3897225400_1686731086_thumb.jpg By the way, I bought here, but I came across similar models under other brands in local... [Read more]
https://obrazki.elektroda.pl/4871957800_1686868065_thumb.jpg https://obrazki.elektroda.pl/5798970700_1687008092_thumb.jpg https://obrazki.elektroda.pl/9946603500_1687008090_thumb.jpg https://obrazki.elektroda.pl/1464950400_1687008090_thumb.jpg... [Read more]
I got one too. It matches the second variant. Device configuration, as extracted from Tuya: - Relay (channel 3) on P7 - Pair/Toggle All Button on P10 - WiFi LED on P8 - Relay (channel 2) on P24 -... [Read more]
https://github.com/OpenBekenIOT/webapp/pull/85 Added after 3 [minutes]: sure it's a T @agranbox ? CB2S should be N Device configuration, as extracted from Tuya: - Relay (channel 3) on... [Read more]
That's a lot of useful information. I have merged the PR, device should be soon live at: https://openbekeniot.github.io/webapp/devicesList.html [Read more]
Is there a solution for CloudCutter for firmware 1.1.15 in the meantime? [Read more]
No. UART flashing is the only known option if the firmware is patched for Cloudcutter exploit. [Read more]
Flashing device with CB2S module is very easy via UART: [Read more]