Various Projects Find Hidden SDR Capabilities in ESP32 Microcontrollers
- ID
- 31091
- Status
- summarized
- Published
- 01 Oct 2026, 11:07 PM
- Fetched
- 02 Oct 2026, 7:33 PM
- Provider
- Hacker News
- Category
- dev-community
- Original URL
- https://www.rtl-sdr.com/various-projects-independently-find-hidden-sdr-capabilities-in-esp32-microcontrollers/
- Source URL
- https://hnrss.org/best
Summary
- Score
- 5.5
- Created
- 02 Oct 2026, 7:34 PM
- Tags
- Audience
- developers
What happened
The ESPARGOS team (a phased array of ESP32-connected patch antennas) found an undocumented ESP32 feature that lets firmware bypass fixed WiFi/Bluetooth behaviour and capture raw IQ baseband samples, turning several ESP32 chips into an internal SDR covering 2.2–2.7 GHz (plus 4.8–6.0 GHz on the ESP32-C5) at up to 80 MS/s with roughly 13–54 MHz analog bandwidth depending on chip. On plain ESP32 the output bandwidth is too low to stream to a PC, so it works only as a snapshot spectrum analyser — except the new ESP32-S31, which streams continuously at up to 16 MS/s over Gigabit Ethernet with a SoapySDR driver for GNU Radio and gqrx 'coming soon'. Independently, Reddit user /u/h0m3us3r found the same feature, published it to GitHub on Sept 26 and demoed an ESP32-S3 as an SDR with an FPGA as a USB3 front end that streams IQ continuously to a PC, though the FPGA currently clocks the ESP32 and produces poor phase noise; a third project, C5VRX, appears to use a similar finding.
Why it matters
If you build or deploy 2.4 GHz IoT/wireless hardware, you can flash ESP-WebSDR firmware to most ESP32 dev boards from a browser and get a live spectrum and waterfall for interference checks at zero extra hardware cost — but do not plan to demodulate or decode continuous radio data on a bare ESP32, because only snapshots can be exported. The only continuous-streaming path in the text is the ESP32-S31 at 16 MS/s over Gigabit Ethernet with a SoapySDR driver still unreleased, and the ESP32+FPGA route is described as a prototype with unresolved clocking/phase-noise problems, so treat general-purpose SDR replacement as unproven. Nothing in this item is Malaysia-specific, so there is no local policy, funding or pricing decision attached to it.
Discussion angle
Three separate groups reportedly uncovered the same undocumented silicon capability before any official documentation existed — what does that imply for anyone shipping products on hardware whose vendor docs you treat as complete?