Hi! I have a SVAKOM toy (China-market model “Fenxin Plus”, BLE name SL278K, internal model FATIMA PLUS SL278K). It uses the same BLE service structure as other SVAKOM devices (FFE0/FFE1/FFE2 + AE00/AE01/AE02), but does not respond to any known SVAKOM command formats.
What I’ve tested via Python (bleak) and LightBlue:
- Classic SVAKOM (55 03 00 …) on FFE1 → device ACKs with 55 ff 04 00 00 00 00 but no motor activation
- Ella format (55 04 03 00 …) on FFE1 → same ACK, no activation
- Sam Neo format (12 01 03 00 …) on AE01 → no response at all
- FFE2 sends heartbeat 55 AA every ~200ms confirming connection is alive
- The official SVAKOM PLUS iOS app controls the toy perfectly
BLE structure (from LightBlue/nRF Connect):
- Service FFE0: FFE1 (Write Without Response), FFE2 (Read, Notify)
- Service AE00: AE01 (Write Without Response), AE02 (Notify)
- Manufacturer Data: Company 0x0032
- Advertised Service: E0FF
- Device broadcasts as TWO separate BLE peripherals (dual-motor: internal thrust + external suction)
The 55 ff 04 response to commands suggests the device receives but rejects them, possibly due to a missing authentication/handshake step that the SVAKOM app performs after connecting.
Has anyone encountered newer SVAKOM models that require initialization before accepting control commands? Any pointers on the auth protocol would be hugely appreciated. Happy to help test and document.
Thanks!