This Hacker Cracked the Bluetooth Code of a Japan-Only Beyblade Launch Tracker
Reverse engineering a Beyblade launch tracker
A Beyblade X fan in Dublin bought the Japan-exclusive Beybattle Pass on eBay and reverse-engineered its Bluetooth Low Energy protocol. Using LightBlue and PacketLogger, he decoded the launch RPM (little-endian), a launch counter, a high-score flag, and status bytes—without ever opening the device. The teardown reveals how an infrared sensor reads a spinning disc to calculate Shoot Power.
After searching online, I found that an average Beyblade launch could reach around 5,000 RPM. I decided to try swapping the two bytes in a2 0c, giving me 0c a2, which converted to 3,234. That's more like it!