Every time a new project's motor spins, an angel gets his wings.
That first wiggle of movement where you pump your fist in the air, nod to your buddies, and say "Fuck yeah!"
Re: Tesla Model 3 Rear Drive Unit Hacking
Posted: Fri Mar 13, 2020 3:14 pm
by Jack Bauer
So, first power up of the M3 rdu inverter on the bench. Elon flashed some nice coloured leds at me and pumped out massive amounts of CAN on TWO busses. I took a sample for posterity. Up on the github repo for the can hackers https://github.com/damienmaguire/Tesla- ... Drive-Unit
Re: Tesla Model 3 Rear Drive Unit Hacking
Posted: Fri Mar 13, 2020 3:44 pm
by Jack Bauer
Now we can start the real hacking. Phase one : eliminate the musk, eliminate the problem.
Pin 124 of the TMS main processor is the reset pin called XRS. Pulling that to ground puts Elon asleep and leaves everything else up and running. Easy pickings for the upcoming HubenAtor XM-3000 modchip:)
Anyone find a high res shot of the rear of the board? I'm getting a feeling old Elon is using bootstrap gate drivers:)
Re: Tesla Model 3 Rear Drive Unit Hacking
Posted: Mon Mar 16, 2020 6:56 pm
by Jack Bauer
Yep. D421,D422and D423. High side bootstrap diodes:)
Re: Tesla Model 3 Rear Drive Unit Hacking
Posted: Tue Mar 17, 2020 3:33 pm
by Jack Bauer
So a little more investigation reveals a Viper16A based power supply section used to generate the low side iso voltages. Not 100% sure as yet but looks to be derived from the hv. Can't say I like this. They're building cars not cheap mobile phone chargers. A multi output dcdc wouldn't have put them out of more than a few $...
Re: Tesla Model 3 Rear Drive Unit Hacking
Posted: Sun Mar 22, 2020 1:23 pm
by Jack Bauer
elon busted my chops on this one but we have control of the mosfets:)
Re: Tesla Model 3 Rear Drive Unit Hacking
Posted: Sun Mar 22, 2020 4:21 pm
by slow67
Jack Bauer wrote: ↑Sun Mar 22, 2020 1:23 pm
elon busted my chops on this one but we have control of the mosfets:)
Great job Damien!
Re: Tesla Model 3 Rear Drive Unit Hacking
Posted: Mon Mar 23, 2020 3:16 pm
by Jack Bauer
Re: Tesla Model 3 Rear Drive Unit Hacking
Posted: Mon Mar 30, 2020 10:14 am
by Jack Bauer
First spin of a motor using the rear drive unit inverter. Switching at 17.6khz.
Re: Tesla Model 3 Rear Drive Unit Hacking
Posted: Mon Mar 30, 2020 11:13 am
by cloudy
Excellent!!!
Re: Tesla Model 3 Rear Drive Unit Hacking
Posted: Mon Mar 30, 2020 5:01 pm
by Jack Bauer
Re: Tesla Model 3 Rear Drive Unit Hacking
Posted: Tue Mar 31, 2020 1:26 pm
by Jack Bauer
Current sensors seem to be easy. J2 header just below the phase terminals gives access.
Analog output of 2.5v at 0A. Measured the following :
Sensor B : 2.500V at 0A going to 2.487V at 1A and 2.4845V at 10A
Sensor A : 2.4980V at 0A going to 2.4964V at 1A and 2.4823V at 10A
Re: Tesla Model 3 Rear Drive Unit Hacking
Posted: Tue Mar 31, 2020 1:30 pm
by Jack Bauer
And with Elon awake we get a 10khz sine wave as our resolver exciter that goes away when he sleeps .....hmmmm
Re: Tesla Model 3 Rear Drive Unit Hacking
Posted: Sat Apr 04, 2020 1:23 pm
by Jack Bauer
Here we go ...
Re: Tesla Model 3 Rear Drive Unit Hacking
Posted: Tue Apr 07, 2020 6:49 am
by Jack Bauer
Decided to take the plunge and give Kicad a go for the model 3 modchip. Intermediate schematic attached. Still need to add a few things like changing Uart2 to LIN for oil pump control etc.