Amazon seemed really worried about the batteries falling out, since the battery door is held shut with both a plastic tab and one Phillips #1 screw. Underneath one of the two AAA batteries is a row of exposed test points. Four other Phillips #1 screws are hidden beneath the device’s rubber feet; removing these allows the device to be opened.¹

Once opened, there are two parts—a top half with the large button, and a bottom half with the PCB and batteries.

The top half consists of three plastic parts, three button contacts, and four springs.

The bottom half consists of one plastic piece, with the battery compartment, and the PCB, secured with two more Phillips screws.

The device can be easily disassembled and reassembled with standard tools and without damaging it.

The PCB is fairly spartan, consisting of a combined microcontroller / Bluetooth Low Energy SoC, three RGB LEDs,² a trace antenna, and supporting components. For easy hackability, there’s a Tag-Connect SWD footprint, as well as a U.FL antenna connector and numerous cuttable traces / solder jumpers. The SoC is a Cypress CYW20735 “single-chip Bluetooth transceiver for wireless input devices.” There appear to be freely available development tools for it.

The bottom of the PCB includes a set of test points, some of which are accessible from within the battery compartment. In particular, the SWD header is accessible via these test points with the following mapping:

 TMF2: SWDIO
 TMF9: SWCLK
TMF10: GND
TMF11: RESET
TMF12: VCC
TMF22: SWO

As far as software goes, the device broadcasts as a Bluetooth Low Energy gamepad with ID EchoBtn2V8.³ I was able to successfully pair it to a computer, but I have not yet tried to use it as an input device. I have also not yet tried to connect a debugger to the SoC.

1. There’s no glue or ultrasonic welding. ↩

2. There’s also a fourth, unpopulated footprint. ↩

3. The last three characters might be specific to my device. ↩