How To Guide [GUIDE] UNBRICK YOUR HARD-BRICKED MTK

Search This thread
May 1, 2023
10
2
I attempted to flash a GSI onto my device, but it failed. After restoring from a backup in OrangeFox Recovery, it seems to have not worked as well and gets stuck on the logo screen for a long time. As a result, my only option left is to try re-flashing the ROM using SP Flash since this method has worked for my device in the past. However, it appears that this is not working now.
 

valbaldemar

New member
May 2, 2023
4
0
My phone screen is always black with no backlight. According to your instructions, the phone was flashed. Flashtool completed without errors
 

1lopes

Senior Member
I think that when I press the volume up (+), volume down (-), and power buttons on my phone simultaneously, it doesn't seem to recognize any device. However, when I only press the volume up (+) and volume down (-) buttons, it recognizes a MTK Preloader USB VCOM port, and during the process, it seems to attempt to connect twice when "Disable Auth" is enabled. In addition, the BootMode displays as BootLoader
You can try different mtk preloader/bootrom drivers if you try searching up in the web

Have you tried filtering the usb connection with libusb?

Could you let the phone turn off by itself and then try to reboot into BROM by pressing all the buttons down and try?
Or unless you have a different model and codename. Do you have the camellia or lilac?
 

1lopes

Senior Member
I think that when I press the volume up (+), volume down (-), and power buttons on my phone simultaneously, it doesn't seem to recognize any device. However, when I only press the volume up (+) and volume down (-) buttons, it recognizes a MTK Preloader USB VCOM port, and during the process, it seems to attempt to connect twice when "Disable Auth" is enabled. In addition, the BootMode displays as BootLoader
Ah, nevermind. I see your problem.

You have a phone with MTK 6765. The Camellia has a MTK 6833 chip.

Did you use the drivers offered in this thread? If you did, please install these ones that are for your device:
https://mega.nz/file/YfgSkILT#8ST9kN0hVLaEtviUg1AhrlFnzKzGEAYy63KI6MYDlNE
 
May 1, 2023
10
2
Yes, I can shut down normally, access fastboot and recovery, and show charging when connected to a charger in a shutdown state. I can also enter all other modes except that when trying to boot into the operating system, the phone keeps getting stuck on the logo screen. I've also tried using libusb to filter USB connections, but it didn't work.
 

1lopes

Senior Member
Yes, I can shut down normally, access fastboot and recovery, and show charging when connected to a charger in a shutdown state. I can also enter all other modes except that when trying to boot into the operating system, the phone keeps getting stuck on the logo screen. I've also tried using libusb to filter USB connections, but it didn't work.
If you can access fastboot, then no need to follow this procedure. Your phone is soft bricked, not hard bricked since your phone still boots to fastboot and recovery (a hard brick is where your phone is completely dead that cant boot to nowhere, only to BROM)
Do you know how to peform a fastboot flash? If so, you will be able to boot into system by reflashing with MiFlashPro

Edit: just remembered you have a phone with MTK 6765. Would you mind telling what phone do you have by the way? It could be completely different from this device's forum and I could be mistaken to give you the wrong procedure.
 
May 1, 2023
10
2
Yes, it's not a Xiaomi phone. My device is Vivo Y3 (PD1901A) with an MT6765 processor. It's not a very popular device.
 
May 1, 2023
10
2
If you can access fastboot, then no need to follow this procedure. Your phone is soft bricked, not hard bricked since your phone still boots to fastboot and recovery (a hard brick is where your phone is completely dead that cant boot to nowhere, only to BROM)
Do you know how to peform a fastboot flash? If so, you will be able to boot into system by reflashing with MiFlashPro

Edit: just remembered you have a phone with MTK 6765. Would you mind telling what phone do you have by the way? It could be completely different from this device's forum and I could be mistaken to give you the wrong procedure.

Yes, I tried to flash GSI using fastboot flash, but then the device kept rebooting. After restoring the system backup from OrangeFox Recovery, the device is now stuck at the boot logo. I've thought about re-flashing the system.img using fastboot, but the system in this ROM is made up of multiple system.new.dat files.
 
May 1, 2023
10
2
Yes, I tried to flash GSI using fastboot flash, but then the device kept rebooting. After restoring the system backup from OrangeFox Recovery, the device is now stuck at the boot logo. I've thought about re-flashing the system.img using fastboot, but the system in this ROM is made up of multiple system.new.dat files.
 

Attachments

  • Capture.PNG
    Capture.PNG
    43.7 KB · Views: 30

valbaldemar

New member
May 2, 2023
4
0
Please help me. What am I doing wrong? What firmware to choose? I tried several options. So far no results. Once, when trying to start fastboot mode, there was a multi-colored screen. Flashed V13.0.6.0.SKSMIXM. unsuccessfully
Screenshot 2023-05-02 122014.png
Screenshot 2023-05-02 121337.png
 

1lopes

Senior Member

1lopes

Senior Member
Yes, I tried to flash GSI using fastboot flash, but then the device kept rebooting. After restoring the system backup from OrangeFox Recovery, the device is now stuck at the boot logo. I've thought about re-flashing the system.img using fastboot, but the system in this ROM is made up of multiple system.new.dat files.
I cant really help you. I understand that the VIVO Y3 is not popular, it doesnt even have a forum, but SP Tool should have worked since its a tool for every MTK device.

Anyways, please try reflashing again, and use these drivers that are for your phone socket:

Those in the thread are for MTK 6833
 
  • Like
Reactions: veloc_h
May 1, 2023
10
2
I cant really help you. I understand that the VIVO Y3 is not popular, it doesnt even have a forum, but SP Tool should have worked since its a tool for every MTK device.

Anyways, please try reflashing again, and use these drivers that are for your phone socket:


Those in the thread are for MTK 6833

Yes, about a year ago, my device of this model was bricked, but I was able to successfully flash the ROM back onto my device using this tool and managed to get it working again. However, now, after more than a year, it seems that this tool is not working anymore. I'm not sure if it's because the manufacturer has updated the system and patched the vulnerability.
 

1lopes

Senior Member
Yes, about a year ago, my device of this model was bricked, but I was able to successfully flash the ROM back onto my device using this tool and managed to get it working again. However, now, after more than a year, it seems that this tool is not working anymore. I'm not sure if it's because the manufacturer has updated the system and patched the vulnerability.
What can I try to help you is the following

Try the thread's MTK Auth bypasser. It works for every MTK device, but worth to take a try

Restart your computer. For the drivers to take proper effect and work correctly, maybe restarting your machine might work (just as the setup utility informed in the video). This is also mandatory for the MTK 6833 drivers

You only need to apply the libusb filter once and not every time you boot your phone into BROM, so no need to waste time on it (incase you have been doing it)

Try to find older firmware for your device and flash it, since 1 year ago you affirm they have done major changes
 
May 1, 2023
10
2
What can I try to help you is the following

Try the thread's MTK Auth bypasser. It works for every MTK device, but worth to take a try

Restart your computer. For the drivers to take proper effect and work correctly, maybe restarting your machine might work (just as the setup utility informed in the video). This is also mandatory for the MTK 6833 drivers

You only need to apply the libusb filter once and not every time you boot your phone into BROM, so no need to waste time on it (incase you have been doing it)

Try to find older firmware for your device and flash it, since 1 year ago you affirm they have done major changes
I have some good news, I finally managed to start up my device🎉 🎉 🎉
 

TheZian

Member
That is weird, are you able to boot into recovery or fastboot?
Did you get any verified boot error?
Did you use the right firmware? If so, what version (MIUI version (Indonesia/EEA/MI, etc.), Android version and Codename)? If you used the latest one (MIUI 14 Android 13) please try MIUI 13 Android 12 or lower

Try this:
Post in thread '[SOLVED] RN10 5G Hard-bricked after installing GSI' https://forum.xda-developers.com/t/solved-rn10-5g-hard-bricked-after-installing-gsi.4563191/post-88302451
I tried the procedure again and in this case it gave me an error about the verified boot, do you have any solution to this problem?

Intenté otra vez el procedimiento y en este caso si me dió un error sobre el verified boot, ¿Tienes alguna solución hacia este problema?

Mod. edit: post translated. alecxs
 
Last edited by a moderator:

1lopes

Senior Member
yes, in the error message, there will be specific partitions that are checking the verified boot. disable the checkboxes on those partitions in the mapping:

si, en la mensaje error, habrá particiones específicas que están comprobando el verified boot. deshabilita las casillas de verificación en esas particiones en el mapeo:
yes, it is bypassable.

you just go to the mapping, and disable the checks on those partitions. it will still boot normally, afterwards, if you want (which is not necessary), you can reflash your phone via fastboot and miflash for those partitions to be flashed correctly
View attachment 5895435

Mod. edit: post translated. alecxs
 
Last edited by a moderator:

TheZian

Member
It has not worked for me, it is still in the bootloop and without giving me access to recovery or fastboot, I really do not know if it is important but the phone bricked after trying the following tutorial:
After putting the command "fastboot reboot fastboot" it entered the bootloop and did not give me access to recovery or fastboot, I don't know if that is important but I'll tell you anyway.

No me ha funcionado, sigue en el bootloop y sin darme acceso al recovery o al fastboot, realmente no se si sea de importancia pero el teléfono se brickeo después de probar el siguiente tutorial:
Después de poner el comando "fastboot reboot fastboot" se metió al bootloop y no me dió acceso ni a recovery o fastboot, no se si sea importante eso pero te lo comento de todos modos

Mod. edit: post translated. alecxs
 

Attachments

  • Screenshot_2023-05-29-16-50-23-114_com.xda.labs.play.jpg
    Screenshot_2023-05-29-16-50-23-114_com.xda.labs.play.jpg
    186.9 KB · Views: 17
Last edited by a moderator:

1lopes

Senior Member
First of all, forget about GSI. We already have custom roms for camellian. I will come back to that later.

Now, it looks like you are trying to boot into dynamic fastboot (fastbootd), correct?

it mentions that you can't boot into fastboot, but could you do it before putting fastbootd?
After putting the command "fastboot reboot fastboot"

If you currently can't start your phone, flash through this guide.

then if you can start Fastboot, you should use Mi Flash to flash the system on your phone the MIUI.
https://mifirm.net/download/7689
I recommend you try this version of miui (12.5.6)

if you don't know how to proceed with MiFlash tell me



and going back to GSI, just use these custom ROMs of your choice:
antes que nada, olvidate de GSI. ya tenemos custom roms para camellian. volveré a eso más tarde

ahora, parece que esta tratando de iniciar en fastboot dinámico (fastbootd), correcto?

mencionó que no puede arrancar en fasboot, pero podría hacerlo antes de poner el fastbootd?
Después de poner el comando "fastboot reboot fastboot"

si actualmente no puede iniciar su teléfono, flash através de esta guia

depues, si puede iniciar Fastboot, debe usar MiFlash para flash el sistema en su telefono la MIUI
https://mifirm.net/download/7689
te recomiendo que pruebes esta versión de miui (12.5.6)
si no sabes como proceder con MiFlash dime



y volviendo sobre GSI, solo use estas custom ROM de su preferencia:
Thread '[ROM][12.1][UNOFFICIAL][xdroidOSS][STABLE] for Camellia/Camellian' https://forum.xda-developers.com/t/rom-12-1-unofficial-xdroidoss-stable-for-camellia-camellian.4584283/

Thread '[ROM][12][Camellia/Camellian] PixelExperience [AOSP] (Unofficial)' https://forum.xda-developers.com/t/rom-12-camellia-camellian-pixelexperience-aosp-unofficial.4572103/

Post in thread '[ROM][12.1][UNOFFICIAL][Camellia/Camellian] crDroid v8.14 [14.04.2023]' https://forum.xda-developers.com/t/rom-12-1-unofficial-camellia-camellian-crdroid-v8-14-14-04-2023.4573661/post-88425331

Mod. edit: post translated. alecxs
 
Last edited by a moderator:

TheZian

Member
Yes, before wanting to enter Fastboot mode I could enter Fastboot mode without problems, but when I wanted to enter Fastbootd mode the cell phone was bricked.

I will try to do the guide again, I only have one question, in the SP flash there is an option that says "Download Only", do I leave it like that or change it to "Firmware Update"?
Si, antes de querer entrar al modo Fastbootd podía entrar al modo Fastboot sin problemas, pero al querer entrar al modo Fastbootd se brickeo el celular.

Intentaré hacer la guía de nuevo, solo me queda una duda, en el SP flash hay una opción que dice "Download Only", lo dejo así o lo cambio a "Firmware Update"?
Mod. edit: post translated. alecxs
 
Last edited by a moderator:

Top Liked Posts

  • There are no posts matching your filters.
  • 1
    Hello everyone, I come here desperate to ask for help, I have a Redmi K40 Gaming with hardbrick (Mediatek Dimensity 1200), basically nothing can be seen on the screen, I did all the steps but when I did the bypass in brom and enter al "sptool" the process starts and then gives an error after about two minutes, hopefully someone can help me :(
    I recommend you to try engineering firmware > https://mifirm.net/downloadfile/61

    apply the same steps as normal, and flash this firmware. if your bootloader is unlocked, you can directly boot into fastboot and try to flash MIUI version 12.5.6.0 > https://mifirm.net/download/5294

    may you also specify what error are you receiving with an screenshot?
  • 5

    MIFLASHPRO PROCEDURE


    The MiFlashPro procedure is easier (and the easiest to recover your hard-bricked device), as you do not require the installation of any other external program (like python used in MTK Client for example (expect, of course, the drivers)
    MTK Client is a more complicated installation as it requires the installation of Python and Git, which can be harder to use commands for people that don't or never used Python and Git, but gives you access to lock and unlock your bootloader with no 168 HOURS wait

    In general, newer MTK chips are really easy to unbrick, even from a hard-brick, as it does not requires to open your phone and test-point it (especially this forum MTK 6833), compared to Snapdragon chips, which is the opposite and even costs 25€ to have a "Authorized Mi EDL Account". Keeping that out of the way, lets get to it



    FIRST OF ALL

    Install the MTK Preload/BROM VCOM drivers for your computer to recognise your phone in BROM state and follow the instructions given in the installation. Attached at the end of the thread
    And download any MIUI ROM version from any trusted website (my favorite is mifirm.net, it downloads faster)



    INSTALL MIFLASHPRO Attached at the end of the thread

    There's two different Mi Flash(es). Mi Flash and Mi Flash Pro.
    Mi Flash is only used to flash MIUI in your device
    , nothing special, probably everyone knows about it.

    Then theres Mi Flash Pro (MFP for short). It's an All-In-One (AIO) tool, as shown below.
    1678576462936.png

    We got the some tabs, but let's focus on the "Recovery" and "SP Flash" tabs, as we do not need the other ones.

    Recovery - Recovery flashing. If your device is only booting to Recovery (which can be possible, since someone here has got a case that couldn't boot to fastboot neither system, only to recovery), by writing both your device IMEI's on the spaces, then clicking "Refurbish" leads to a more advanced factory reset than just wiping your data normally. This can get you out of recovery and go back to MIUI however. If it's not your problem, then follow on.

    SP Flash - The famous SP Tool. SP Tool is a easy tool to use, may be confusing at first, but then first time a charm and you can get used to it, easily, or after some times. SP Tool is famous for recovering many MTK devices from hard bricks, and thats what we will use to recover your device.




    OPEN SP FLASH UP


    Here you are, greeted by a nice interface. There's nothing, but I will explain you to it.

    There's 3 blank spaces, called Download-agent (DA for short), Scatter-loading file & Authentication file.


    • DA is to have access to the devices internal storage to be able to do the flashing;
    • Scatter-loading shows you the mapping of the partitions it will flash on the MTK;
    • Authentication is just the MTK protection for newer mtk devices that you need to be able to flash (*its also used to successfully flash, but you still need to bypass it somehow, as you require a Mi Account able to do BROM flashing, see below as you follow the thread)

    Now, fill the blanks up:

    • To find the DA, it is always in the MiFlashPro installation location, so ...\MiFlashPro\. Access that folder, open up "\SP_Flash_Tool_V5" folder, and you will find a file named "MTK_AllInOne_DA.bin", use it as the DA.
    • To find the authentication file, its located in the same path of the DA, so ...\MiFlashPro\SP_Flash_Tool_V5\, and you will find a file named "auth_sv5.auth", use it as the authentication file.
    • Finally, to find the scatter-loading file, it is in the ROM folder you extracted, so ...\camellian_xx_xxxx_images_VXX.X.X.X.xxxxx_XXXXXXXX.XXXX.XX_XX.X_xxxxxl\ (the X's represent your MIUI version you downloaded). The scatter-loading file is always located in the folder "images", so \camellian...\images\, and you will find a text file named "MT6833_Android_scatter.txt", use it as the scatter-loading file.

    Done?
    Don't flash it yet, as we need to fix a issue with "combo_partisize_check".
    Open up the scatter-loading file with Notepad or any text editor, so the text file named "MT6833_Android_scatter.txt".


    Now, use the locate function to locate the following:
    combo_partsize_check: true

    After finding the first one, replace the "true" to "false", and the following one, and so on, till every line of them is set to "false" and isn't able to locate any set as "true".




    We are done and finished setting up SP Tool!

    *Now, we need to bypass the Authentication of our device. Why? Just as the Snapdragon chips, Xiaomi has also implemented a security layer where you need to log in with a "Authorized Mi Flashing Account", which costs money (generally only on Snapdragon devices, I am not sure if we can find any paying service for it), which is really easy to bypass due to BROM.

    Download the file "mtkauthbypass.zip" attached in the thread below.

    Extract it, open it up, and it looks like this:
    annotation-2023-03-11-110706-png.5859493

    Now, press the "Disable Auth" button, you will have 60 seconds to get ready, get your hands on the phone and press at the same time the VOL+, VOL- & POWER button, till you see prompt appearing in the blank space. Should be similiar as this:
    capture-png.5877405

    (thanks to chopwell20 for image)


    After that, immediately open up SP Tool, and press "Download" as fast as possible.

    Let it flash, from 5 to 15 minutes.
    After it finishes, a blue window with a checkmark appears, disconnect your phone, and just press down the POWER button to boot it up.



    And thats it! You have recovered your phone!

    If you have any issues or it didn't work out, please reply so someone can help you out

    (Simplified image to understand better without explanation)
    1678578283975.png


    ISSUES

    CONNECTIONS ISSUE is completely normal!

    It is when you try to connect your phone in BROM mode to your computer, but it always shows the error symbol over it.
    1678657883670.png


    From what it seems, this should be a issue from the phone and not your computer or the drivers itself

    It doesn't mean that it makes you unable to unbrick it, but a lot of patience, as with this issue you will require to keep trying over and over again to bypass it.

    So, if you can't bypass the Auth, this is probably it. Just keep trying and trying over again till you get it. There's (probably) no workaround rather than having patience to do it

    (This also happens to me every time, so I consider it normal, and with some users such as bg0169 having this same issue, I just considered this was important to address it out, but if you think its not this issue, then reply, better safe than sorry)


    I made this thread due to some users bricking their devices, and for every new user that hard-bricks their device to hopefully make this to help them
    2
    Amazing guide.

    Thanks. and missing screenshot where Authbypass gives you prompt.
    Capture.PNG
    2
    What can I try to help you is the following

    Try the thread's MTK Auth bypasser. It works for every MTK device, but worth to take a try

    Restart your computer. For the drivers to take proper effect and work correctly, maybe restarting your machine might work (just as the setup utility informed in the video). This is also mandatory for the MTK 6833 drivers

    You only need to apply the libusb filter once and not every time you boot your phone into BROM, so no need to waste time on it (incase you have been doing it)

    Try to find older firmware for your device and flash it, since 1 year ago you affirm they have done major changes
    I have some good news, I finally managed to start up my device🎉 🎉 🎉
    1
    Yes, I tried to flash GSI using fastboot flash, but then the device kept rebooting. After restoring the system backup from OrangeFox Recovery, the device is now stuck at the boot logo. I've thought about re-flashing the system.img using fastboot, but the system in this ROM is made up of multiple system.new.dat files.
    I cant really help you. I understand that the VIVO Y3 is not popular, it doesnt even have a forum, but SP Tool should have worked since its a tool for every MTK device.

    Anyways, please try reflashing again, and use these drivers that are for your phone socket:

    Those in the thread are for MTK 6833
    1
    Yes, i flashed the engineer ROM because it works without cust and userdata. From there i had two options:

    1. I could enter fastboot and do the usual flash process from there
    2. I could use SP Flash Tool to flash the global ROM by excluding cust.img, userdata.img and rescue.img from the scatter file and selecting the Firmware Upgrade option from SP Flash Tool.

    I used the second method. I don't know why tho, the first one would take much less time probably.

    After flashing the global ROM using the second method, you need to enter fastboot and flash cust and userdata anyway.