Tesla Model 3 Battery Hacking
-
- Posts: 1275
- Joined: Fri Mar 01, 2019 9:15 pm
- Location: Bristol
- Has thanked: 97 times
- Been thanked: 204 times
Re: Tesla Model 3 Battery Hacking
Very well documented Damien, hats off. I gave up when the LTC6820 solution turned out to be a none starter, did not dig into why.
If they literally increased all the pulses by a factor of 2 I wonder if any of the SPI data still holds true. But then again reverse engineering it will still be possible.
If they literally increased all the pulses by a factor of 2 I wonder if any of the SPI data still holds true. But then again reverse engineering it will still be possible.
Founder Volt Influx https://www.voltinflux.com/
- Kevin Sharpe
- Posts: 1345
- Joined: Fri Dec 14, 2018 9:24 pm
- Location: Ireland and US
- Been thanked: 4 times
Re: Tesla Model 3 Battery Hacking
OK, thanks for the clarification
This is a personal post and I disclaim all responsibility for any loss or damage which any person may suffer from reliance on the information and material in this post or any opinion, conclusion or recommendation in the information and material.
- Kevin Sharpe
- Posts: 1345
- Joined: Fri Dec 14, 2018 9:24 pm
- Location: Ireland and US
- Been thanked: 4 times
Re: Tesla Model 3 Battery Hacking
Tesla BMS connector cell count
This is a personal post and I disclaim all responsibility for any loss or damage which any person may suffer from reliance on the information and material in this post or any opinion, conclusion or recommendation in the information and material.
- Jack Bauer
- Posts: 3563
- Joined: Wed Dec 12, 2018 5:24 pm
- Location: Ireland
- Has thanked: 1 time
- Been thanked: 87 times
- Contact:
Re: Tesla Model 3 Battery Hacking
Got my little analog front end boards in from JLC. To my amazement they work:) We can now translate Musk-spi into 3.3v pulses ready to feed into an fpga or micro for decoding into data.
I'm going to need a hacksaw
Re: Tesla Model 3 Battery Hacking
I now have a PACK 25S battery pack. Can I remove the original control board in the middle? Then connect a 25S third-party BMS to make it work?
Thank God! thank you!
- Kevin Sharpe
- Posts: 1345
- Joined: Fri Dec 14, 2018 9:24 pm
- Location: Ireland and US
- Been thanked: 4 times
Re: Tesla Model 3 Battery Hacking
You can do anything you want but whether it's a good idea is for you to decide
If you want to discuss this further please start another thread so that we can focus on Model 3 battery hacking here.
This is a personal post and I disclaim all responsibility for any loss or damage which any person may suffer from reliance on the information and material in this post or any opinion, conclusion or recommendation in the information and material.
- johu
- Site Admin
- Posts: 5684
- Joined: Thu Nov 08, 2018 10:52 pm
- Location: Kassel/Germany
- Has thanked: 153 times
- Been thanked: 960 times
- Contact:
Re: Tesla Model 3 Battery Hacking
Am I late to the party?
Thought I'd post some ltspice goodness.
This should recover a true SPI data stream with clock, data and CS that can be processed by a standard SPI peripheral.
Thought I'd post some ltspice goodness.
This should recover a true SPI data stream with clock, data and CS that can be processed by a standard SPI peripheral.
Support R/D and forum on Patreon: https://patreon.com/openinverter - Subscribe on odysee: https://odysee.com/@openinverter:9
- johu
- Site Admin
- Posts: 5684
- Joined: Thu Nov 08, 2018 10:52 pm
- Location: Kassel/Germany
- Has thanked: 153 times
- Been thanked: 960 times
- Contact:
Re: Tesla Model 3 Battery Hacking
Delayed clock and removed OR gate
- Attachments
-
- isospi.asc.zip
- (1.03 KiB) Downloaded 67 times
Support R/D and forum on Patreon: https://patreon.com/openinverter - Subscribe on odysee: https://odysee.com/@openinverter:9
- Jack Bauer
- Posts: 3563
- Joined: Wed Dec 12, 2018 5:24 pm
- Location: Ireland
- Has thanked: 1 time
- Been thanked: 87 times
- Contact:
Re: Tesla Model 3 Battery Hacking
Thanks Johannes. Building this will be fun:)
I'm going to need a hacksaw
- Jack Bauer
- Posts: 3563
- Joined: Wed Dec 12, 2018 5:24 pm
- Location: Ireland
- Has thanked: 1 time
- Been thanked: 87 times
- Contact:
Re: Tesla Model 3 Battery Hacking
Connector used on the board for the isospi is Molex Mini50 Series, 34912 Series Number, 1 Row 2 Way Surface Mount Plug PCB Header.
Black for BMB-A (batman)
Part number : 34912-8020
RS Stock No. 131-4729
Grey for BMB-B (robin)
Part number : 34912-8021
Mouser No: 538-34912-8021
Black for BMB-A (batman)
Part number : 34912-8020
RS Stock No. 131-4729
Grey for BMB-B (robin)
Part number : 34912-8021
Mouser No: 538-34912-8021
I'm going to need a hacksaw
- Jack Bauer
- Posts: 3563
- Joined: Wed Dec 12, 2018 5:24 pm
- Location: Ireland
- Has thanked: 1 time
- Been thanked: 87 times
- Contact:
Re: Tesla Model 3 Battery Hacking
New design transciever board in production at JLC. Based on a Xilinx Spartan 6 FPGA running at 100MHz. Ultimately will provide receive and transmit with spi and uart interfaces. Couple this up to Simpbms and we should be good to go:)
....ok I was going to put a vga port on it but I stopped myself
....ok I was going to put a vga port on it but I stopped myself
I'm going to need a hacksaw
Re: Tesla Model 3 Battery Hacking
Does this mean I can buy this product within a month?Jack Bauer wrote: ↑Mon Apr 20, 2020 5:26 pm New design transciever board in production at JLC. Based on a Xilinx Spartan 6 FPGA running at 100MHz. Ultimately will provide receive and transmit with spi and uart interfaces. Couple this up to Simpbms and we should be good to go:)
....ok I was going to put a vga port on it but I stopped myself
Thank God! thank you!
Re: Tesla Model 3 Battery Hacking
Well done JB / DM! Connects to the 2-wire connection from the module boards?
- Jack Bauer
- Posts: 3563
- Joined: Wed Dec 12, 2018 5:24 pm
- Location: Ireland
- Has thanked: 1 time
- Been thanked: 87 times
- Contact:
Re: Tesla Model 3 Battery Hacking
Yeah will plug into the existing harness. Of course it probably won't work so don't get too excited just yet:)
I'm going to need a hacksaw
- Kevin Sharpe
- Posts: 1345
- Joined: Fri Dec 14, 2018 9:24 pm
- Location: Ireland and US
- Been thanked: 4 times
Re: Tesla Model 3 Battery Hacking
This is fabulousJack Bauer wrote: ↑Mon Apr 20, 2020 5:26 pm New design transciever board in production at JLC. Based on a Xilinx Spartan 6 FPGA running at 100MHz. Ultimately will provide receive and transmit with spi and uart interfaces.
Can I suggest that you keep the FPGA design closed source and sell the PCB as a tested and supported product? We really do want to wave you off to Lanzarote one day
This is a personal post and I disclaim all responsibility for any loss or damage which any person may suffer from reliance on the information and material in this post or any opinion, conclusion or recommendation in the information and material.
- muehlpower
- Posts: 570
- Joined: Fri Oct 11, 2019 10:51 am
- Location: Germany Fürstenfeldbruck
- Has thanked: 12 times
- Been thanked: 96 times
Re: Tesla Model 3 Battery Hacking
Do you think i can rearrange the module as shown. The order of the boards remains, but the HV part is different. The reason for this is that I want to stack the short modules on top of the Long ones so that they fit between the frame rails.
- Kevin Sharpe
- Posts: 1345
- Joined: Fri Dec 14, 2018 9:24 pm
- Location: Ireland and US
- Been thanked: 4 times
Re: Tesla Model 3 Battery Hacking
We're not currently aware of any limitations that would prevent you from doing that
This is a personal post and I disclaim all responsibility for any loss or damage which any person may suffer from reliance on the information and material in this post or any opinion, conclusion or recommendation in the information and material.
- Jack Bauer
- Posts: 3563
- Joined: Wed Dec 12, 2018 5:24 pm
- Location: Ireland
- Has thanked: 1 time
- Been thanked: 87 times
- Contact:
-
- Posts: 1275
- Joined: Fri Mar 01, 2019 9:15 pm
- Location: Bristol
- Has thanked: 97 times
- Been thanked: 204 times
Re: Tesla Model 3 Battery Hacking
Nice, any way of grabbing SPI data logs? So we can start looking at doing some decoding.
These simulated or done on actual hardware?
These simulated or done on actual hardware?
Founder Volt Influx https://www.voltinflux.com/
- Jack Bauer
- Posts: 3563
- Joined: Wed Dec 12, 2018 5:24 pm
- Location: Ireland
- Has thanked: 1 time
- Been thanked: 87 times
- Contact:
Re: Tesla Model 3 Battery Hacking
Thats a simulation on Xilinx ISE. Hope to start actual hardware tests next week. Once proven any data logger like a Saleae or Analog discovery can connect to the spi or uart ports on the board and grab data. Initial release will be receive only. If it works out on the bench I'll pop one in the post to you Tom.
I'm going to need a hacksaw
- Jack Bauer
- Posts: 3563
- Joined: Wed Dec 12, 2018 5:24 pm
- Location: Ireland
- Has thanked: 1 time
- Been thanked: 87 times
- Contact:
Re: Tesla Model 3 Battery Hacking
First tests with the Spartan 6 FPGA. Looks like we can detect the long pulses in order to decode CS. Now onto clk and data.
I'm going to need a hacksaw
- Jack Bauer
- Posts: 3563
- Joined: Wed Dec 12, 2018 5:24 pm
- Location: Ireland
- Has thanked: 1 time
- Been thanked: 87 times
- Contact:
- Jack Bauer
- Posts: 3563
- Joined: Wed Dec 12, 2018 5:24 pm
- Location: Ireland
- Has thanked: 1 time
- Been thanked: 87 times
- Contact:
Re: Tesla Model 3 Battery Hacking
Good news is our new pcbs with the Xilinx FPGA onboard work a treat.
I'm going to need a hacksaw
Re: Tesla Model 3 Battery Hacking
Do your boards work with each battery module board, or require the main Model3 BMS?