A strange issue left many e-rickshaw drivers in trouble after people used a mobile app to remotely switch off running vehicles. While videos of the incidents quickly went viral on social media and became a source of jokes and memes, the drivers faced confusion, delays and possible loss of income.
The problem involved e-rickshaws fitted with lithium batteries that use a Bluetooth-enabled Battery Management System (BMS). These batteries can be connected to a mobile app called BAT-BMS, developed by a China-based company, Shenzhen Grenergy Technology Co., Ltd.
The app allowed users within Bluetooth range to connect to the battery. In some cases, it also allowed them to turn off the battery’s discharge system, which immediately stopped the e-rickshaw from running. The feature was originally designed for maintenance, diagnostics and battery protection, but weak security made it possible for others to misuse it.
Cybersecurity experts have long warned that Bluetooth devices without proper authentication and encryption can be vulnerable to unauthorized access. Devices with weak security settings can allow nearby users to connect and control them.
After the issue became widely known, the BAT-BMS app was temporarily removed from the Google Play Store. It later returned with an updated version that now requires a password before users can access important battery controls. The Play Store shows the app was updated on July 1.
Some drivers who did not face the issue said they were using wet batteries, while those using dry lithium batteries appeared to be affected more often.
The incident has highlighted the importance of stronger security in connected devices and better awareness among users about the technology used in their vehicles.
