Pretty sure that's because those toy companies are using cheapest off-the-shelf chips and most basic protocols, because, well, it's cheaper. Likely a lot of reb

Pretty sure that's because those toy companies are using cheapest off-the-shelf chips and most basic protocols, because, well, it's cheaper. Likely a lot of rebranded, "open" Chinese toys anyway. That and a neglect for reliability and security probably makes reverse engineering rather straight forward. Assumption based on connectivity experience, since the Bluetooth connection is usually rather unreliable and weird, and obviously not as well engineered as even cheap Bluetooth in-ear headphones, or game controlers. Ironically very susceptible to being blocked by body parts (which means vibe no more). Seems, like it's some dead simple serial transmission, which isn't fault tolerant at all. Those controllers are not bothering with any buffering, or much any computation at all really. Seems like they just straight stream signals to the motors.