Keyless Entry: Hacking SwitchBot Smart Locks neodyme.io

Researchers at security firm Neodyme found that SwitchBot smart locks used AES-CTR without integrity protection, letting an attacker transform an encrypted “lock” command into an “unlock” command over Bluetooth. They say an early firmware fix was bypassable because the app still used the old protocol; SwitchBot later released updates that Neodyme confirmed block the described attack, with fixes listed for the locks, keypads and app.