• Warning!!

    Riding a tuned or deristricted EMTB is not a trivial offence and can have serious legal consequences. Also, many manufacturers can detect the use of a tuning device or deristricting method and may decline a repair under warranty if it was modified from the intended original specification. Deristricting EMTB's can also add increased loads for motors and batteries. Riding above the local law limit may reclassify the bike as a low-powered bike, requiring insurance, registration and a number plate.

    Be aware of your local country laws. Many laws prohibit use of modified EMTB's. It is your responsibility to check local laws. Ignoring it, has potential implications to trail access, and risk of prosecution in the event of an accident.

    UK Pedelec Law

    Worldwide Laws

    We advise members great caution. EMTB Forums accepts no liability for any content or advice given here. 

Derestricting bosch smart system

you can not replicate the process without a bosch dealer id.
You can literally not change anything on the bike without one.
you can only see diagnostics and the configuration or service report.
even if you have the file he uses you can do nothing with it, you probably can't even clear an error code without logging in.
according to reddit dealers have a bosch security USB fob, it's probably what he shares over vpn with USB Network Gate software
My bike under service and reports literally lists his shop as the last place to service it, it's literally a shop with bosch dealer status not a jailbreak

Dealer services are locked down
giS9fp9.png
How did you bypass the login screen? Am I missing something?
 
⚡ EMTB Pro Go Pro — exclusive discounts & ad-free Peaty's 25% off & more · Ad-free browsing · Pro badge See the deals →
If you are interested try
i think they do not ask more for Paypal
That one will not work if you have the smart system with a rim magnet.
 
Just picked up a Cube one77 in Europe for an adventure and will take it back to the US. Would it be best to wait until I get to the location I will be keeping the bike to update it for the first time so it will be guaranteed to start off with the better speed and not look like trying to derestrict
 
As far as I understand, after installation, in the Flow app the Cube brand appears, but the image of the specific model no longer appears, correct?

Can you still change the language on the Purion 400 ?
Or is it now only available in English ?
 
As far as I understand, after installation, in the Flow app the Cube brand appears, but the image of the specific model no longer appears, correct?

Can you still change the language on the Purion 400 ?
Or is it now only available in English ?
Yes it's a generic grey outline of a bike in the app, don't have a purion 400 but kiox 300 and it's still in Dutch for me so I don't see a reason why it'd be any different on that.
 
On my Kiox 300 I have all the normal EU languages still available, although the translation of the "avoid distracted riding" message is very misleading in Czech, had to switch to English temporarily to understand what it was about😅
 
As far as I understand, after installation, in the Flow app the Cube brand appears, but the image of the specific model no longer appears, correct?
mine shows as this, the language is English Because I am English, it probably goes off your phones language setting like every other app.
Screenshot_2025-08-29-15-34-01-905_com.bosch.ebike.onebikeapp.jpg

i have still same picture of ebike on flow app, nothing changed here.
Because your bike is already a Cube?
I can't remember how the bike pic looked but it wasn't generic like this
 
There's no login screen for diagnostics, you just click the X on the window or hit cancel
Strange I don't appear to have cancel or x. Can't do anything but go to the login screen, when logging in with a new ID it obviously says I don't have access.
Capture.JPG
 
Just got mine done. Gen4 smart with new motor came with 16.19 update so didn't wanna chance a chip. He added all the riding modes. So I could get emtb+ auto, sport etc
 
I recently picked up a trek rail with the gen 5 motor and have it upgraded with the latest firmware 100nm etc.

The speed limit is frustrating and I am interested in doing this but concerned about warranty etc.


I'm sure the original file can be rolled back in the event the bike develops an issue, but I'm guessing Bosch before honouring any warranty work will check there has been no tampering and they'll be able to see this?
 
The speed limit is frustrating and I am interested in doing this but concerned about warranty etc.
your warranty will be void almost 100%
Third party repairs are likely the only option, obviously you have to remove the motor from the bike and mail it to them.

or if you live outside of the UK
 
No I dont use the Flow app. I uninstalled it again after the 750/100nm update. And removed Bluetooth pairing to my phone.
I have now installed the box but i get error code 523001 after a minut bicycling. I wonder if I have placed the box correctly. It was kind of hard to find a good and stable place to fit it. Please could you upload a photo exactly how you placed it. It will help me a lot to eliminate what I have done wrong.
 
I haven't said hello officially yet, there has been a bit of a saga to me getting the e-bike but, I have just had it updated and now has a max assisted speed of 20mph/32kmh. Great person to deal with and good communications all the way through. Very pleased!
 
very interested in using this guy to derestrict my ebike but looks dodgy as hell bank transferring to someone you dont know, any longterm members confirm this guy is legit? Seems to be only 1 post newbies posting. Its a impressive scam if it is one!
 
very interested in using this guy to derestrict my ebike but looks dodgy as hell bank transferring to someone you dont know, any longterm members confirm this guy is legit? Seems to be only 1 post newbies posting. Its a impressive scam if it is one!
Have a little faith 😂
 
How do i get in touch with the polish guy. Ive looked at olx but the apps in polish....
 
Last edited:
I have now installed the box but i get error code 523001 after a minut bicycling. I wonder if I have placed the box correctly. It was kind of hard to find a good and stable place to fit it. Please could you upload a photo exactly how you placed it. It will help me a lot to eliminate what I have done wrong.

I have now installed the box but i get error code 523001 after a minut bicycling. I wonder if I have placed the box correctly. It was kind of hard to find a good and stable place to fit it. Please could you upload a photo exactly how you placed it. It will help me a lot to eliminate what I have done wrong.
1000059018.jpg
 
How do i get in touch with the polish guy. Ive looked at olx but the apps in polish....
His website has the contact details, it was easy enough to work out where to click to get them, even in Polish.
 
Hello,
Great forum. It took a few hours to me reading the 32 pages. I was looking for long time on how the de restriction works, but I did not found much before this forum.

I was reading about megabobra's arduino nano based solution, great. Is that still working with current sw on the Gen5 with rim magnet?

Anyway, I'm very curious of a few things. First of all, how the motor's controller finds out that it is de-restricted or tampered?
Do you know examples what the controller sense and realize something is wrong?

I thought inside the motor it is not a reed switch (would need a strooong magnet anyway from the distance), but probably a hall sensor. I see it is confirmed now, but do we know if Bosch use one dimension hall sensing or 2, 3?

Another important thing, I did not found anyone would just let every second impulse go through = doubling the speed limit and display half the real speed all the time. This way the odometer would be usable also, we would just need to double in mind.

At #415 I see the sensor may need to see + - field changes, which would require +- current in the coil what is faking the rim magnet, driven by a H bridge probably this case. Do we know this is needed?

I'm thinking of making a circuit (for fun, open, and not for sale) with a controller with a few timers. With one timer I would measure the real time between pulses, with another 2 timers I would generate the output to the coil. I'm thinking to just simply use a multiplier and when incoming signal stops, output stops. Should that work?

For the coil, I would use a half ferrite with a coil, because that has direction, would face the open to the motor. That way I would need less energy to fake the magnet. Before that and under that, I would still put a thin coil, but not to fake the magnet. I'm thinking to put a flat pick up coil to the motor housing and measure/see with an oscilloscope the pulses what the original rim magnet makes. After that, I would adjust the fake impulses to make it similar (big question is if I need 2 direction magnetic field or one is enough).

Another thing, is the "on" pulse width matter or not? I mean, in real life, not only the time between pulses vary, but as the speed goes up, the magnet travels faster in front of the sensor and makes shorter impulse. If that does not matter, what length you suggest? I would guess, saying at speed like 25km/h, with wheel circumference of 2366 mm, the reel wheel should spin about 3 times in a second, to 333ms for a full turn. I guess the magnet triggers the sensor in only like 10 degrees in a revolution, in this case it would like 9,25ms impulse on the sensor in the motor. Is 10ms a good start?

I hope I would not need to talk with the motor unit, but I consider to use a controller with CAN interface, at least to be able to listen. Maybe, if I can access what button is pressed, I could also make activation/deactivation with the mode buttons.

On the other hand, I have another project, I want to make an automatic cutoff of charging at certain % of charge, already tried to listen between the charger and battery with a CANable 2.0, but need time to find out what are they talking about and how to get the % (I want to cut power of the charger at 80%). I know it is a different topic and different CAN frames, just mention because it is connected.

Let me know if you can help in any way,
Thanks!
giordano
 
Even commercial solutions don't work 100% without errors, I don't recommend you to fuck with that.

Megabobra's arduino nano based solution definitely doesn't work with gen 5.

The only solution that is 100% so far is the Polish USA flash.

I'm an enthusiast arduino/esp programmer but I didn't get into this, bosch has it really well taken care of and it would make my hair stand out, not to mention that the bike goes into limp mode and you really don't want to deal with that in an authorized service and pay for it and unlock it.
 
Even commercial solutions don't work 100% without errors, I don't recommend you to fuck with that.

Megabobra's arduino nano based solution definitely doesn't work with gen 5.

The only solution that is 100% so far is the Polish USA flash.

I'm an enthusiast arduino/esp programmer but I didn't get into this, bosch has it really well taken care of and it would make my hair stand out, not to mention that the bike goes into limp mode and you really don't want to deal with that in an authorized service and pay for it and unlock it.
Well, if it goes to limp mode, as I know it is only to ride 90min without assist. That is annoying, but not a big deal I think. On the other hand, I would do for fun. To learn. I'm sure it will be more expensive at the end comparing to an off shelf solution, but I value the experience. You know .... curiosity may be stronger than obstacles :-)
 
Keep reading
    Browse all

    Similar Threads

    Community Stats

    Since 2018
    668K
    Messages
    40,756
    Members
    Join 30,000+ Riders, it's free!
    Back
    Top