logo elektroda
logo elektroda
X
logo elektroda

"Xiaomi" X6 "4K" Mini Spy Camera from Ali Express: Taixin TXW817-810 MCU, CK803

divadiow 4275 12
ADVERTISEMENT
  • #1 21546269
    divadiow
    Level 38  
    Posts: 4833
    Help: 420
    Rate: 851
    Here's some info about a "Xiaomi" X6 "1080P" ("4K" on Ali page) mini spy camera. Very familiar YsxLite manual/app setup - same as many A9 type cams.

    It was bought from Ali Express at https://www.aliexpress.com/item/1005008608595789.html
    Image of a Xiaomi X6 mini camera offer on AliExpress, with large 4K text and a small black cube camera next to a smartphone, on a white background.

    Like several of my A9s, this comes with the Taixin Semi (HugeIC) TXW817-810 MCU at its heart. The TXW817 line consists of these two variations

    ParameterTXW817-824TXW817-810
    Package TypeQFN48QFN48
    MasterCK803CK803
    Main frequency (MHz)240240
    Flash (KB)20481024
    RAM (Byte)272*1024 +4096*1024272*1024
    GPIO2931
    Operating voltage (V)3 ~ 3.63 ~ 3.6
    Operating temperature (°C)-40 ~ 85-40 ~ 85
    Advanced Timer2*16bit2*16bit
    General Timer9*32bit9*32bit
    WatchDog11
    PWM1414
    RTC11
    UART33
    SPI33
    IIC22
    ADC11
    DAC11
    Code encryption
    SDIO11
    USB11
    RMII11
    Operating frequency band(MHz)2.4G2.4G
    SDC11
    DVP11
    MJPEG2 enc + 1 dec2 enc + 1 dec
    IIS22
    PDM11
    M2MDMA22
    AES11
    CRC11
    TRNG11
    QSPI11
    Video Encoding
    LCD(RGB&MCU)11
    AudioADC11
    AudioDAC11


    Pinout diagram for the Taixin TXW817-8x0 QFN48 chip with labeled pins.

    Like the WinnerMicro W80x, these are based on the C-SKY architecture. CK803 in the case of the TXW817s

    Pics of packaging and device inside and out.

    HD WiFi mini camera set including packaging, user manual, the camera, mount, and USB cable on a light carpet. Packaging of a mini spy camera showing four example uses: house, shop, child, and sports. Packaging of a mini spy camera labeled HD WiFi Camera with a product and manufacturer information sticker. Photo of a mini spy camera HD WiFi 1080P package and YsxLite manual on a carpet.
    Small black cube-shaped spy camera on a round magnetic stand, placed on a light-colored carpet. Close-up of the bottom of a mini spy camera with a micro USB port labeled DC, a TF microSD slot, and a red LED indicator. Mini spy camera in a black cube shape with two buttons and an LED on top, mounted on a stand. Disassembled mini spy camera with visible electronics and casing on a light brown carpet. A disassembled mini sports camera without a case on a light beige carpet. Disassembled electronic device with a visible battery and circuit board on a carpet. Printed circuit board with microSD card slot, microphone, and lithium polymer battery. A printed circuit board with electronics, a battery, and a black plastic casing on a white background. Camera module on a green PCB with visible electronic components. PCB board with connected wires and visible micro USB port. Disassembled components of a small camera: PCB, lithium-polymer battery, and lens. Printed circuit board with electronic components and connected wires. Printed circuit board with electronic components and a connected lithium-polymer battery. A printed circuit board with a microSD card slot and a connected battery. A printed circuit board with electronic components, a memory card slot, and connected wires. Digital camera module on a white background.

    silkscreen marking:
    STD-X6-MAIN-V01
    20240328

    No markings on the battery but it's measuring at 3.86v
    A digital multimeter by Parkside showing a 3.86 V voltage reading on the display.

    These two unlabelled pads are RX/TX so from TX at 921600 baud the boot log can be captured
    PCB with a microSD card slot and labeled UART RX/TX connection points.
    Code: Text
    Log in, to see the code


    we can see the real resolution of the camera in the initialisation in log - VGA

    Code: Text
    Log in, to see the code


    The camera ribbon has printed on it DC-H8-7 04-6182V1 (I think) - not sure who this cam is by yet.
    Electronic camera module labeled DC-HB-7 on a blue background.

    Despite being C-SKY related I have not been able to establish any CK-Link type connections to it using the HDA and HCK pads. I do not know if the factory program these with those two or with with some USB type thing using HSDP and HSDM. This particular cam doesn't seem to expose RESET either, so I didn't expect CK-Link method to work.

    We see here in a previous post that a programming application is provided by Taixin but it looks intended for use with their TXLink programmer

    TXLink-Lite programmer by Taixin Semiconductor, with buttons and LED indicators

    I was hoping it's just a CK-Link rebrand device. Maybe it is and I haven't got the process right with CK-Link. I ordered one from Taobao so that should arrive in a couple of weeks.

    I'll add more to this thread in coming days/weeks.
    Attachments:
    • TXW817 数据手册 V1.6_20241115165936.pdf (3.75 MB) You must be logged in to download this attachment.
    • "Xiaomi" X6 "4K" Mini Spy Camera from Ali Express: Taixin TXW817-810 MCU, CK803 IMG_0006.JPG (5.92 MB) You must be logged in to download this attachment.
    • "Xiaomi" X6 "4K" Mini Spy Camera from Ali Express: Taixin TXW817-810 MCU, CK803 IMG_0005.JPG (2.75 MB) You must be logged in to download this attachment.
  • ADVERTISEMENT
  • #3 21548509
    divadiow
    Level 38  
    Posts: 4833
    Help: 420
    Rate: 851
    divadiow wrote:
    The camera ribbon has printed on it DC-H8-7 04-6182V1 (I think) - not sure who this cam is by yet.


    I plugged this cam into an XF16 to see which driver initialised re https://www.elektroda.com/rtvforum/topic4074636-180.html#21547719

    Code: Text
    Log in, to see the code


    maybe the "8" is a "0" H0704 = HI0704

    and it works in XF16
    Close-up of fingers holding a blue object in front of the camera lens with an app interface in the background.
  • ADVERTISEMENT
  • #4 21548811
    p.kaczmarek2
    Moderator Smart Home
    Posts: 14388
    Help: 650
    Rate: 12308
    So the camera from this device is compatible with XF16 cameras? That's a good to know information. Now we need to know the pinout of the camera
    Helpful post? Buy me a coffee.
  • #5 21548825
    divadiow
    Level 38  
    Posts: 4833
    Help: 420
    Rate: 851
    seems to be, and I'm guessing/hoping all the other cam modules I have are too - the connector *looks* the same across them all - the ribbon and print is different so I'm expecting a variety of cam models to be detected. I'll label and photo them all in the process when I get to it.

    We do need to know pin-out. 18 pins
    Close-up of a 18-pin electronic connector with gold-plated pins and a metal housing.
  • #8 21563291
    xury
    Automation specialist
    Posts: 7068
    Help: 876
    Rate: 1486
    Board Language: polish
    I have a TXW817-810 on the same chip
    Electronic module with TXW817-810 chip, microSD card slot, micro USB port, and battery. .
    Is it possible to drop alternative FW into it?
    I will probably have access to about a hundred of these camcorders
  • ADVERTISEMENT
  • ADVERTISEMENT
  • #11 21741955
    divadiow
    Level 38  
    Posts: 4833
    Help: 420
    Rate: 851
    I present the TXWDevCube

    TXWDevCube circuit board with visible connectors and labeled signal pinsPCB with USB-C port and black pin header on blue surfaceTXWDevCube module wired to a development board on a blue matClose-up of TXWDevCube connectors and labeled pin functions
  • #12 21742117
    p.kaczmarek2
    Moderator Smart Home
    Posts: 14388
    Help: 650
    Rate: 12308
    Nice, however it seems, that you may need some flux? Which one do you use?
    Helpful post? Buy me a coffee.
  • #13 21742133
    divadiow
    Level 38  
    Posts: 4833
    Help: 420
    Rate: 851
    It's been fluxed more since pic and the enameled wires are a bit more secure ;)

    It was very fiddly!

    Added after 27 [minutes]:

    Soldering flux paste ZJ-18 tin with red and white label showing product features

Topic summary

✨ The discussion centers on the "Xiaomi" X6 mini spy camera sold on AliExpress, advertised as "4K" but actually 1080P, which uses the Taixin Semi TXW817-810 MCU (CK803 core). This MCU variant features 1MB flash and 272KB RAM, operating at 240 MHz with multiple peripherals including UART, SPI, I2C, ADC, DAC, and timers. The camera module is identified as HI0704, confirmed by successful chip ID reading and initialization, and is compatible with the XF16 camera driver. The camera connector has 18 pins, with ongoing efforts to map the pinout and label additional pads. A 1MB flash backup of the device firmware has been extracted and shared. No alternative firmware is currently available, but cloud-free operation may be achieved using the cam-reverse project. SDKs for the MCU are accessible for custom firmware development. The device includes an LED ring around the lens. The TXW817 MCU line includes two variants: TXW817-824 (2MB flash) and TXW817-810 (1MB flash), both with CK803 cores and similar peripheral sets.
Generated by the language model.

FAQ

TL;DR: The “Xiaomi” X6 mini cam runs a TXW817‑810 (CK803 @ 240 MHz) and actually records at 640×480; “we can see the real resolution … VGA.” UART pads output boot logs at 921600 baud for debugging. [Elektroda, divadiow, post #21546269]

Why it matters: This FAQ helps teardown-minded buyers and modders verify specs, tap debug pads, and plan de-clouded use without bricking hardware.

Quick Facts

Is the X6 really 4K or 1080p?

Neither. The boot log shows “SENSR ident ok:640*480” and sets the CSI to 640×480. That’s VGA, not 1080p or 4K. As the author notes, “we can see the real resolution … VGA.” Check resolution claims on listings and rely on logs for truth. [Elektroda, divadiow, post #21546269]

Which MCU and architecture does the X6 use?

It uses a Taixin (HugeIC) TXW817‑810 with a C‑SKY CK803 core at 240 MHz. The board exposes common peripherals (UART, SPI, I2C, DVP, SDIO, USB) and includes Wi‑Fi and MJPEG encode/decode blocks. This mirrors C‑SKY usage seen in WinnerMicro W80x devices. [Elektroda, divadiow, post #21546269]

What image sensor is inside this X6 module?

The camera identifies as HI0704 during probe. The author plugged the module into an XF16 platform and logs confirmed “detect hi0704 … Init Done,” and it worked. Expect HI0704‑class performance characteristics. [Elektroda, divadiow, post #21548509]

How do I capture the boot log via UART on the X6?

Two unlabelled pads are RX/TX. Use 921600 baud to read the boot log.
  1. Solder to RX/TX pads; connect GND.
  2. Open a serial terminal at 921600 8‑N‑1.
  3. Power the board and capture the stream from reset to AP bring‑up. [Elektroda, divadiow, post #21546269]

Can I install alternative firmware on TXW817‑810 units?

No public drop‑in firmware exists. The author states, “I am not aware of any alternative firmware for them, no.” For cloud‑free use, try cam‑reverse workflows; SDKs are available if you plan custom development. “Start from the SDK if you can code.” [Elektroda, divadiow, post #21563420]

Is the X6 camera module compatible with XF16 boards?

Yes. After transplanting the module, logs showed HI0704 detection and successful initialization on XF16. That confirms electrical and driver compatibility in that test setup. [Elektroda, divadiow, post #21548509]

What is the camera ribbon pinout on this unit?

The ribbon uses 18 pins. A traced pinout image was shared (community contribution by apache02). Use that diagram to map DVP signals, power, and sync lines before rehosting the sensor. Verify against your board revision. [Elektroda, divadiow, post #21553382]

Which pads are for programming or debug beyond UART?

Pads labeled HDA/HCK and HSDP/HSDM are present. CK‑Link attempts failed, likely because RESET isn’t exposed. Taixin supplies a TXLink programmer and app; the path may require TXLink or a USB‑based flow via HSDP/HSDM. [Elektroda, divadiow, post #21546269]

What is C‑SKY CK803 in plain terms?

CK803 is a 32‑bit C‑SKY CPU core used inside the TXW817 line. It’s similar in concept to ARM Cortex‑M microcontrollers, with peripherals for cameras (DVP), storage (SDIO), and networking (Wi‑Fi). The X6 uses CK803 for control and encode. [Elektroda, divadiow, post #21546269]

What does the boot log tell me about stability or failures?

The log shows events like LVD (low‑voltage) reset and TF card mount failures (“TFcard not mounted”). Plan for power integrity and a known‑good microSD. Edge case: without TF card, directory creation fails and recording won’t start. [Elektroda, divadiow, post #21546269]

Do we have any performance or health stats from the device?

Yes. Example stats include freemem: 181,032 bytes after boot and chip temperature peaking at 42 °C during idle AP mode. Use these as baselines when tuning features or thermals. [Elektroda, divadiow, post #21546269]

What is OpenTXW81X and where is development headed?

OpenTXW81X is a community effort targeting Taixin TXW81x devices. The thread notes development progress and adds device‑specific images, signaling increased momentum for open tooling and documentation. [Elektroda, divadiow, post #21648395]

What is the TXWDevCube shown later in the thread?

It’s a hand‑wired breakout and dev rig for TXW81x work. The author shared photos to illustrate a workable lab setup for probing, rework, and firmware experiments. Treat it as an idea starter for your own fixture. [Elektroda, divadiow, post #21741955]

Does the X6 include IR LEDs or a light ring?

Yes, the lens is surrounded by an LED ring, as highlighted by the author. If repurposing the module, budget current for the ring and test thermal behavior in enclosures. [Elektroda, divadiow, post #21546395]

How can I safely back up the onboard flash?

A full 1 MB flash dump has been captured and shared by the author. Replicate by wiring to the flash interface or using your chosen programmer and verifying size/checksums before modifications. Keep an untouched copy off‑device. [Elektroda, divadiow, post #21560895]

What is cam-reverse and why consider it?

Cam‑reverse is a project for de‑clouding and locally controlling low‑cost Wi‑Fi cams. For the X6 class, it’s the most practical path today to avoid vendor servers while retaining functionality. “Your best option … appears to be cam‑reverse.” [Elektroda, divadiow, post #21563420]
Generated by the language model.
ADVERTISEMENT