flash force Wiki
Interactive browser →
Wiki / Third-party bricks
#device#ble#third-party#clone-hubs

Clone hubs (Mould King · CaDA · JieStar)

Battery hubs that Chinese brick brands put in their own sets — Mould King, CaDA, JieStar — with plugs and motors shaped to fit LEGO's, and all of them still on sale in 2026. They hear Bluetooth Low Energy at 2.4 GHz, and all but one hear it one way only: the controller rewrites an advertising payload over and over and the hub acts on whatever it hears, with no connection, no pairing and no bonding.

Reach

CapabilityStateNote
Mould King DIY module, 4 outputsworks, untested herethe exception in the family: an ordinary Bluetooth peripheral, connected like any hub, straight from the page
Mould King 6.0, 6 outputsworkswhole byte 0x000xFF centred on 0x80, so about ±127; driven by advertising, so it goes through the bridge
Mould King 4.0, 4 outputsworks, untested herenibble, −7 to +7, stop 0x08
Mould King 3.8, 5 outputs (4 plus 1 virtual)works, untested herenibble, −7 to +6, stop 0x09
Mould King 5.0, 5 outputs (4 plus 1 virtual)works, untested herenibble, −7 to +7, stop 0x00
CaDA Race Car, 3 outputsworks, untested heredrive, steer and lights; byte centred on 0x80
JieStar SCM 4 and SCM 8, 4 and 8 outputsworks, untested herenibble, −7 to +7, stop 0x00
Three hubs of one family at onceworks, untested hereDevice 1, 2 and 3, cycled with the hub's own button, on MK 4.0, 6.0 and SCM 8; 3.8, 5.0 and SCM 4 hold one slot each
A 38 kHz Power Functions emitterout of reachthe M-0006 and M-0019 boxes hold a 2.4 GHz receiver and no infrared receiver at all
Any advertising hub straight from a browserout of reacha browser is not permitted to advertise, which shuts the page out of the whole family by construction

What it hears

Bluetooth, except that what travels is not really a Bluetooth message: a proprietary radio frame dropped at a known byte offset inside the advertising payload. The manufacturer IDs, the frame layout, the whitening and the one-off connect telegram are all in Third-party hubs over Bluetooth, and the DIY module sits in the same note as the plain case, with a service, a characteristic, four ports and a heartbeat.

The nibble hubs use the same −7 to +7 a Power Functions remote produces, so a speed value maps straight across with no rescaling.

"Power Functions" printed on a Mould King box is a claim about the plugs, not about the radio. The motors and connectors fit LEGO's first-generation Power Functions parts; the receiver hears nothing infrared. A set that looks like an 8879 remote with an 8884 receiver can be scrambled 2.4 GHz inside, and no infrared emitter will ever reach it.

Reaching it today

Two things bite whatever does the advertising: