Freeing Tuya Device with BK7231N (T34) Any Hacks for Firmware 1.3.10?

Hello, I have a Tuya device with a new BK7231N (T34) chip as BGA!
No chance to get it freed from cloud without soldering.
Software is 1.3.10 so no cloud cutter works, or is there still a hack for this patched firms?
Here is a photo......



Any idea with this?
Tomorrow I will try to grep RX/TX pins on PCB if it's breaked out.

Only soldering method will work I guess.

Here is one approach:
https://www.elektroda.com/rtvforum/topic4036975.html#20968165
This switch is similiar:
https://www.elektroda.com/rtvforum/topic4036852.html
Here is more related topics:
https://www.elektroda.com/rtvforum/find.php?q=T34

>>21202758
I have the same one. I had to desolder the chip and flash it separately.
It was really challenging, but I managed.
However, the box in the photo has completely different GPIOs compared to the ones described in the forum posts. I partially mapped them out, but I still can’t find S1/S2 (S1 is neutral). I’ve checked all 26 pins using GPIO Finder.

Now I’m wondering if one of the contacts didn’t solder properly when I reattached the chip.

or maybe I just can’t find it

additional info:
Pin 8 is the LED,
Pin 10 is the button
Pin 26 controls the relay.

But I still can’t locate S2 anywhere. Has anyone encountered this? Any help would be appreciated!

Also, could someone clarify if PowerSave needs to be enabled on this chip? I’m unsure if it affects the relay or button functionality. Thanks in advance!

did you take a backup before conversion to OBK?

divadiow wrote:

did you take a backup before conversion to OBK?

yes, but flash tool can't extract config from backup readResult...-21-48.bin Download (2 MB)

cool. Here is the boot log for your device



the pin assignments are buried in there too



pairs with Tuya as a Mini switch K601


storage info in fw after pairing