Bluetooth Vulnerabilities Expose Weaknesses in E‑Rickshaw Battery Management

The investigation focused on the Bluetooth modules embedded in battery management systems that regulate charge, discharge, and temperature of e‑rickshaw power packs. By reverse‑engineering the communication protocol, the analysts demonstrated that the devices accept commands without robust authentication, allowing an attacker to alter voltage thresholds or trigger rapid discharge. Laboratory tests showed that such manipulation could cause overheating, reduced battery lifespan, or sudden loss of power while the vehicle is in motion.

The tension stems from the tension between the push for low‑cost, connected mobility solutions and the imperative for rigorous safety standards. Municipal authorities have subsidised e‑rickshaw fleets to curb pollution, yet the rapid rollout has outpaced the establishment of uniform cybersecurity guidelines. Manufacturers, eager to capture market share, have often prioritised feature integration over hardened firmware, creating a gap that regulators are now forced to address.

Consequences are already materialising as city transport departments contemplate recalls or mandatory firmware updates. Operators may face increased maintenance costs, while commuters could experience service interruptions if fleets are temporarily withdrawn for safety checks. In the longer term, the episode may stimulate the adoption of industry‑wide certification schemes for electric‑vehicle battery systems, reshaping procurement policies for municipal fleets.