Case study
moldqueen: Mould King toy control through reconstructed BLE advertisements
moldqueen controls Mould King building-block toys by encoding commands as BLE advertisements derived from a reconstructed device protocol. Raspberry Pi, Android and ESP32-S3 radio cores expose a shared WebSocket API to a browser client; the Mould King 13112 excavator is the documented hardware reference.
- Targets
- Protocol
- Category
- Independent reconstruction cases
- Relationship
- Independent reconstruction project
- Sources reviewed
- Evidence class
- C1 partial scope or analysis entry
- Stars
- 4
- Last commit
- 2026-07-13
- Language
- JavaScript
- License (GitHub)
- MIT
GitHub data as of 2026-11-10
Evidence

- Observed
- Download and demo observed; the case covers part of the target software.
- Scope
- Partial
- Checked
- 2026-11-08
Requirements & limits
- Prerequisites: Requires a compatible Mould King toy and a Raspberry Pi with USB BLE dongle, an Android device, or an ESP32-S3 radio core.
- Prerequisites: The Raspberry Pi path specifies Python 3.13 and a 5 V / 3 A power supply.
- Testing evidence: The author identifies the Mould King 13112 excavator as the hardware-proven reference.
- License: MIT License.
Cite
BibTeX
@misc{moldqueen-case,
title = {{moldqueen: Mould King toy control through reconstructed BLE advertisements}},
howpublished = {\url{https://github.com/jrichter24/moldqueen}},
url = {https://github.com/jrichter24/moldqueen},
urldate = {2026-11-06},
note = {Awesome REA entry: \url{https://awesomerea.org/resources/moldqueen-case/}}
}Plain text
moldqueen: Mould King toy control through reconstructed BLE advertisements. https://github.com/jrichter24/moldqueen (accessed 2026-11-06). Awesome REA entry: https://awesomerea.org/resources/moldqueen-case/
Useful? Star Awesome REA on GitHub2.4k
About this entry
The description was reviewed against primary sources.
Primary sources
- README.md GitHub · jrichter24/moldqueen · Revision f5b41fc
More in Protocols
- DJI RC: reconstructing joystick values from DUML USB messages · Case study
- Minisforum MS-A1: reconstructing embedded-controller sensor access · Case study
- NFC PM-Pro: reconstructing the FURUI reader's HID protocol · Case study
- RF Power Meter V5 Companion: reconstructing the meter's serial protocol · Case study
- miband-lit: reconstructing Mi Band 5 BLE heart-rate access · Case study
- Zafro AC: replacing the I4season device cloud locally · Case study