Three weeks ago, her brother’s device had started transmitting encrypted bursts to an unknown server, even when powered off. The official diagram showed no backdoor. But this schematic—unofficial, annotated in Mandarin and Hindi—revealed a hidden test point: .

Anya spread the faded PDF across her workbench—the Redmi Note 10 Pro schematic, leaked from an old service center archive. Each line, resistor symbol, and capacitor label was a tiny ghost of Xiao Mi’s engineering.

Under the microscope, TP2047 wasn’t a test point. It was a bridge. A tiny, undocumented microcontroller soldered between the modem and the audio codec, sipping power from the battery management IC.

A kill switch.

Anya traced the signal path. The ghost chip wasn’t spying. It was listening—for a specific ultrasonic tone. When triggered, it would hard-brick the phone and wipe the eMMC.