/image%2F1896381%2F20151209%2Fob_cb2b49_obd365-com.png)
Unlock Fiat MD1CS069 ECU with OBDSTAR DC706
OBDSTAR DC706 MDG1 boot glitch unlocking new user report:
FCA Fiat Ducato Bosch MD1CS069 TC299TP unlocked! Success!
Requqires MP001 + c4-06 adapter.
In boot mode.
The connection diagram is inside the software.
Most important is checksum.
Checksum correction is automatically in writing flash.
OBDSTAR G3 and ECU Master will do the same.
Add Lamborghini URUS MLB Key by Keydiy KD-MP and KD-X4
Lamborghini URUS added a new key + converted the original key into LCD touch key.
Without SFD gateway.
Read original MLB key data with Keydiy KD-MP tool.
Generate dealer key and learn key with KD-X4.
Keydiy KD-X4 Added 2020 VW Atlas MQB49 5C Key
Added a spare MQB49 5C key to a 2020 VW Atlas using Keydiy KD-X4 successfully.
Disassembled the original key and read original key data with KD-X4 and godiag 5C clip adapter.
Generate dealer key.
No SFD gateway.
Learn key in car.
Flex Read and Write Hyundai DCU DCU17PC43 on Bench
Question: Possible to read and write KEFICO SIM2K-510 from HYUNDAI TUCSON 1.6CRDI 2022 with Magic Motorsport Flex programmer?
Which tool can read Hyundai Kefico SIM2K-510 ECU?
Here is the clue.
No tool to read/write this ecu.
Not possible to read out. Adblue possible in DCU.
No tool in the market can unlock them at the moment.
But if have any issues with adblue, can do it via DCU.
Example:
Hyundai i30 1.6Crdi 116hp
Adblue off
This car has the SIM2K-510, no tool to unlock it, so we have to do the job in the DCU.
DCU: DCU17PC43
Bench mode.
What is the Difference Between 2M2 Shadow Warrior and 2M2 Tank 2 Pro?
What is the difference between 2026 new 2M2 Shadow Warrior and old 2M2 Tank 2 Pro CNC key cutting machine?
2M2 Tank 2 Pro: more powerful motor and more robust structure.
Shadow Warrior 2M2: more compact and lightweight. The new 2M2 has LED indicators, built-in battery (5000 mAh), and tool box.
In terms of functions, key compatibility, and cutting quality, they are practically identical.
What Tool to Program 2025 Ram ProMaster All Keys Lost?
Problem:
It’s a 2025 Dodge Ram ProMaster. All keys have lost. Autel IM508 with 12+8 cable was able to pull pin code, but it will not erase keys or allow new one to be programmed.
Will it even pull the pin code if RF Hub is locked? Can we do this with Witech if RF Hub is locked?
Here is the clue.
Rfhm locked means the it has the rf hub lockout update. No keys can be added.
RFH locked means the hub is locked to vehicle and that’s always the case. Because it can only be used once and it locks to that car no way to unlock.
It says rfhm locked that means it’s locked to due to update. Rfh locked is the hub being locked to vehicle.
All promasters 25 and up are locked.
Solution:
Need to replace rfh an then use witech to program both.
Rfh is located in headliners.
Install a new hub and keys programmed without any issues.
Even with witech you have to replace RFH to new one.
The RFH new from the dealer was 160$.
Easy to program with witech them you program new keys.
Repair Toyota Yaris Airbag 89170-0D540 with CG70
Repairing crash data on Toyota Yaris SRS airbag module 89170-0D540 using CG70 airbag reset tool – clearing crash flags / airbag ECU reset for reuse.
Part number: 89170-0D540.
Fault code: crash event stored
Auto repair and crash crash on bench mode.
FormulaFlash Bosch MD1 MG1 ECU Unlocking Coming Soon
Good news! 2020.06- Bosch MD1 MG1 locked ECUs unlocking is coming soon on the FormulaFlash ecu programmer.
Function:
Unlock ECU in boot mode.
Read ECU
Write ECU
Checksum correction
Supported encrypted ECUs:
| Brand | ECU (locked) | Protocol |
|---|---|---|
| VAG Bosch | MG1CS163 | TC298 |
| BMW | MD1CP032 | TC299 |
| Ford | MD1CP006 | TC298 |
| JLR | MD1CP017 | TC298 |
| Stellantis | MG1CS042 | TC298 |
| Isuzu | MD1CS089 | TC299 |
| BMW | MG1CS024 | TC298 |
| FCA | MD1CS069 | TC299 (Fiat Ducato) |
| VAG Bosch | MG1CS031 H80 | TC298 |
| JLR | MD1CP007 | TC298 |
Solution to Yanhua ACDP BMW CAS4+ OBD Car Not Start Problem
Problem:
A customer programmed a new key on a BMW F10 CAS4+ using Yanhua Mini ACDP2 via OBD. After programming, the remote functions and Comfort Access work perfectly on the new key. However, the car won’t start.
Solution:
Perform a fix start function
Sync CAS to DME and will start again.
Look for “Sync code lost repair” function and if it doesn’t work, for “reset starter motor”.
FormulaFlash Update Bench Protocol for Ford SID212 SID212EVO ECUs
FormulaFlash programmer will release new software v1.1.9.0 on July 31st, 2026.
Release Date: 31.07.2026
What’s New?
New Bench Mode support for Ford SID212 / SID212EVO (TC297TP) ECUs
Real Read & Write.
Checksum Support.
Supported Vehicles:
Transit
Transit Custom
Ranger
Focus IV
Kuga III
Mondeo
Autel IM508 NASTF Subscription is Required Error Solution
Problem:
Autel IM508 device says ‘NASTF subscription is required to continue using this function.’
Like as the device said. Autel MaxiIM devices now implement NASTF SDRM validation.
You need to purchase NASTF subscription to unlock IMMO-related features.
How to Repair BMW G Series BDC3 Module if Damaged?
Below is a case study detailing the repair of a BMW G series BDC3 module that experienced a communication failure (BDC3 module damaged), preventing the vehicle from starting.
BMW 3 Series BDC3 Perfect Rescue:
A 2021 BMW 3 Series (G20) suffered a severe battery drain that left the BDC3 (Body Domain Controller) completely dead — no communication with the vehicle, and no start 😱
To tackle this tough nut, he deployed the ultimate solution:
- Magic Motorsport Flex —Boot glitch unlocked the Bosch MG1CS201 locked ECU and read the ISN (Individual Serial Number) from the DME (engine control unit).
- Brand new genuine BDC3 module — no more uncertainty from used parts. He replaced it with a brand new OEM BDC3, eliminating any hidden issues at the source.
- Two original keys precisely programmed — the extracted ISN is written into the new BDC3, and two brand new original keys are programmed, perfectly restoring the vehicle’s immobilizer system
This process requires specialized equipment and extensive experience — the BDC3 is the core security module on G‑chassis BMWs, and it’s heavily encrypted. Any single mistake could permanently lock the module. Battery drain causing BDC no-communication is a common pain point for the G20/G28, but with the right approach, it can be fixed flawlessly!
Flex Glitch Unlocked BMW MG1CS001 ECU Successfully
Magic Motorsport Flex Boot glitch unlock latest user report:
“Another one added to the collection.
This one is a highly challenging unlock and requires very good, even heat to open the ECU correctly. Do not attempt to open it cold, or you significantly increase the risk of damaging the housing.
BMW Bosch MG1CS001
Open both sides of the ECU.
Remove both resistors.
Proceed with the boot glitch unlock.
Use 5 ohm resistor between E1 and boot pin in case you can’t connect.
The MDG1 Boot Glitch Unlock is a real game changer. If you still don’t have Flex Full, don’t wait any longer—it’s time to start glitching.”
CG201 Mileage Programmer Update to V040
CGDI CG201 mileage programmer released new software V040 in July 2026.
CG201 V040
VERSION UPDATE
Supports one-click OBD mileage correction for dashboard.
Added the following Ford models:
Ford/EXPLORER (TRAC) 2007-2010 by OBD
Ford/EXPLORER 2007-2010 by OBD
Ford/NAVIGATOR 2007-2010 by OBD
Ford/EC0SP0RT 2013-Type 1/2 by OBD
Ford/FIESTA 2013-Type 1/2 by OBD
Ford/FIESTA-2012 by OBD
Ford/NEWMONDE0 2015-SPC56455+93C86 by OBD
Ford/EDGE 2014-2017 SPC56455+93C86 by OBD
Ford/EXPLORER 2015-SPC56455+93C86 by OBD
Ford/TOURNEO 2013-COURIER by OBD
Ford/TRANSIT 2013-COURIER by OBD
Ford/EDGE 2012-HYBRID by OBD
Ford/EXPEDITION 2014-D70F3423 by OBD
Ford/EXPLORER 2011 D70F3423 by OBD
Ford/EXPLORER (TRAC) 2014-D70F3423 by OBD
Ford/TAURUS 2012-HYBRID by OBD
Ford/TAURUS 2011-D70F3423 by OBD
Ford/TOURNEO 2009-D70F3421 by OBD
Ford/TOURNEO 2006-D70F3325 by OBD
Ford/TRANSIT 2009-D70F3421 by OBD
Ford/TRANSIT 2006-D70F3325 by OBD
Ford/TRANSIT 2018-Type 1 by OBD
Ford/F150 2011- by OBD
Ford/TAURUS 2011-MB91F016A by OBD
Ford/TOURNEO COURIER 2016-D70F352X by OBD
Ford/TRANSIT 2016-D70F352X by OBD
Ford/TRANSIT MK8 2016-NEC70F3525 by OBD
Added the following Lincoln models:
Lincoln/MKC 2012-HYBRID by OBD
Lincoln/MKC 2012-HYBRID by OBD
Lincoln/MKC 2011-D70F3423 by OBD
Lincoln/MKC 2011-D70F3423 by OBD
OBDSTAR Upcomming Bosch MD1 MG1 ECUs Unlocking
OBDSTAR will release breakthrough upgrade soon. This upgrade supports unlocking encrypted Bosch MD1 & MG1 ECUs.
Locked MG1/MD1 ECU
Read/Write & Unlock
Support following ECUs:
-
Bosch MD1CP032 (BMW B57) TC299
-
Bosch MG1CS024 (BMW B48/B58) TC298
-
Bosch MG1CS201 (BMW B48/B58) TC298
-
Bosch MD1CS069 (FCA) TC299
-
Bosch MD1CP006 (Ford) TC298
-
Bosch MD1CS089 (ISUZU etc.) TC299 (Only for ECU MASTER C)
-
More Models Coming Soon…
Compatible devices:
Functions
- Read/Write Internal Flash
- Read/Write Internal EEPROM
- ECU Unlock
- Checksum Correction
NOTE: Requires RH850/V850 adapter kit (C4-06 adapter).
Only ECU Master HD pack C can unlock diesel MD1CS089 ECU.
