OTA not working with firmware 5.5.9

[itsthisjustin]

Pasting the original issue opened by @pochitafanclub here as we moved this codebase over to the org

unlocker-helper (2).log

unlocker-helper (1).log

[luizcarlos1405]

I made the mistake of updating to XTOS 5.5.9 (chinese version) and now I'm having this issue. When I select "System update" it connects to the xteink hotstpot, shows "Check updates", but fails with message: Network fluctuation:-1 Request Error.

The logs that show in the Unlocker app (from /tmp/unlocker-helper.log) don't seem much helpfull. Let me know if I can help in any way. I'm a developer myself so maybe I can dig more if I know where to look.

I'm on a NixOS machine, on linux, running the AppImage version (seems to be working fine except for that), so there's a small chance my issue is because of my setup.

Logs

�[2m2026-05-21T23:21:38.036724Z�[0m �[32m INFO�[0m �[2munlocker_helper�[0m�[2m:�[0m helper listening �[3mversion�[0m�[2m=�[0m"0.2.19" �[3mendpoint�[0m�[2m=�[0m/var/run/com.sofriendly.crosspoint.unlocker.helper.sock
�[2m2026-05-21T23:21:49.148550Z�[0m �[32m INFO�[0m �[2munlocker_helper::ops::linux�[0m�[2m:�[0m hotspot connection profile added �[3mconn_path�[0m�[2m=�[0m/org/freedesktop/NetworkManager/Settings/12
�[2m2026-05-21T23:21:49.156780Z�[0m �[32m INFO�[0m �[2munlocker_helper::ops::linux�[0m�[2m:�[0m Wi-Fi hotspot activated via NetworkManager �[3mssid�[0m�[2m=�[0mxteink
�[2m2026-05-21T23:21:50.181573Z�[0m �[32m INFO�[0m �[2munlocker_helper::ops::linux�[0m�[2m:�[0m port-redirect rule installed �[3mfrom_port�[0m�[2m=�[0m53 �[3mto_port�[0m�[2m=�[0m10053 �[3mbridge�[0m�[2m=�[0m10.42.0.1
�[2m2026-05-21T23:21:50.182176Z�[0m �[32m INFO�[0m �[2munlocker_core::dns�[0m�[2m:�[0m DNS server bound �[3maddr�[0m�[2m=�[0m10.42.0.1:10053 �[3mhosts�[0m�[2m=�[0m["api-prod.xteink.cn", "api.github.com", "unlocker.crosspointreader.com"]
�[2m2026-05-21T23:21:50.182922Z�[0m �[32m INFO�[0m �[2munlocker_core::http�[0m�[2m:�[0m tls cert loaded �[3msubject�[0m�[2m=�[0mCN=unlocker.crosspointreader.com �[3msans�[0m�[2m=�[0m["DNSName(\"unlocker.crosspointreader.com\")"] �[3mnot_before�[0m�[2m=�[0mMay  1 00:19:19 2026 +00:00 �[3mnot_after�[0m�[2m=�[0mJul 30 00:19:18 2026 +00:00
�[2m2026-05-21T23:21:50.183732Z�[0m �[32m INFO�[0m �[2munlocker_core::http�[0m�[2m:�[0m manifest servers up �[3mhttp_addr�[0m�[2m=�[0m10.42.0.1:80 �[3mhttps_addr�[0m�[2m=�[0m10.42.0.1:443
�[2m2026-05-21T23:21:50.183746Z�[0m �[32m INFO�[0m �[2munlocker_helper::servers�[0m�[2m:�[0m spoofing servers armed

[lpg2709]

Men, I tried to unlock mine and got the same error. To test it, I turned off the unlock program and connected to the same Wi-Fi network as my computer, just to make sure it wasn't a Wi-Fi problem. The device managed to get the official XTOS 5.5.9 update;

Then I decided to try again, I'm on the Chinese version, and it gave the same error. Could it be that they've developed a way to detect MitM?

I'll try installing a packet sniffer on the network and investigating further :/

[pochitafanclub]

I was getting "NO UPDATES DETECTED." Have tried on 3 different PCs so far.

There's some people on Reddit now reporting similar issues so I assume the new firmware is the culprit.

[itsthisjustin]

I dont think the firmware is the issue. Pretty sure I've tested that exact one. I'll load it on my device now just to make sure.

[itsthisjustin]

Ha I now get connection failed as well. Sounds like they blocked me! Let me dig into this

[lpg2709]

I hope I'm not being stupid, but I tried to update/change the firmware to Crosspoint by downloading the binary, putting it on the SD card as update.bin, and entering recovery mode (left button + power); only the text "Go Home" appeared and it returned to the stock firmware's initial screen :(

I did this on XTOS 5.5.9

[itsthisjustin]

If you're on mac...try changing your internet sharing hotspot name to unlocker...

[itsthisjustin]

New updates out across all platforms. Give them a try please

[pochitafanclub]

Did not work on laptop number one. Trying number two now.

It alternates between "NO UPDATE FOUND" and "Network Fluctuating Error". Using 0.2.20.

unlocker-helper.log

EDIT: Now updating with laptop two. Success! Laptop one is much newer than laptop two, and laptop two is behind in Windows Updates.

[itsthisjustin]

@pochitafanclub excellent news

[luizcarlos1405]

I was able to make it work here. It was NixOS firewall, so I'm going to explain a few things in case another NixOS user sees this. Also I had XTOS 5.5.9 firmware installed. So I can confirm it works for this version of firmware.

First, running the AppImage required a shell.nix file with all dependencies:

{ pkgs ? import <nixpkgs> {} }:

let
  extraLibs = with pkgs; [
    libglvnd
    mesa
    libdrm
    libgbm
    xorg.libX11
    xorg.libxcb
    fontconfig
    freetype
    fribidi
    harfbuzz
    expat
    zlib
    stdenv.cc.cc.lib
    e2fsprogs
    libgpg-error
    gnutls
    gmp
    webkitgtk_4_1
    gtk3
    glib
    pango
    cairo
    gdk-pixbuf
    atk
    libsoup_3
    libepoxy
  ];

  libPath = pkgs.lib.makeLibraryPath extraLibs;

  eglVendorDirs = pkgs.lib.makeSearchPathOutput "share/glvnd/egl_vendor.d" "share/glvnd/egl_vendor.d" [
    pkgs.mesa
    pkgs.libglvnd
  ];

in
pkgs.mkShell {
  LD_LIBRARY_PATH = "${libPath}:/run/opengl-driver/lib";
  __EGL_VENDOR_LIBRARY_DIRS = "${eglVendorDirs}:/run/opengl-driver/lib/glvnd/egl_vendor.d";
  WEBKIT_DISABLE_DMABUF_RENDERER = 1;

  buildInputs = [ pkgs.appimage-run ] ++ extraLibs;

  shellHook = ''
    if [ ! -e /usr/bin/pkexec ]; then
      echo "pkexec not found at /usr/bin/pkexec"
      echo "Run: sudo ln -sf /run/wrappers/bin/pkexec /usr/bin/pkexec"
      echo "Then restart the app."
    fi
  '';
}

ask LLM for help, it really does help.

Checking if this is your case

NixOS enables its firewall (networking.firewall.enable = true) by default. The firewall blocks all incoming connections unless explicitly allowed.

Run this while the Unlocker has the hotspot active and the device shows "Check updates":

sudo iptables -L nixos-fw -n -v

If you see rules that drop or reject traffic, the firewall is blocking the device. You can also verify the servers are running but unreachable from the device's perspective:

This works from the host (uses OUTPUT chain, bypasses firewall):

curl -s http://10.42.0.1/api/v1/check-update

Check if DNAT redirected any packets that never arrived at the server:

sudo iptables -t nat -L PREROUTING -n -v

If DNAT shows packets hitting the redirect rule but /tmp/unlocker-helper.log has no dns query or http request lines, the firewall is dropping them.

The Fix

Temporarily allow traffic from the hotspot subnet while the Unlocker is running:

sudo iptables -I nixos-fw 1 -s 10.42.0.0/24 -j ACCEPT

Then retry "System update" on the device. After the install completes, remove the rule:

sudo iptables -D nixos-fw -s 10.42.0.0/24 -j ACCEPT

[Sparkadium]

this advice worked on a locked xteink x4 I received from aliexpress, doing the following + tethering my wifi from my phone to my laptop:

Start the Mobile Hotspot first (it'll be broken)
ncpa.cpl → right-click the upstream adapter (the one
with internet) → Properties → Sharing tab
Tick "Allow other network users to connect…" and
explicitly set "Home networking connection" to the Local
Area Connection* virtual NIC the hotspot just created
Apply, then have the device retry

[lpg2709]

Hi, I tested this new version, on my brother's computer with Windows 11 it gave the same error

Network fluctuation:-1 Request Error

I switched to Linux, based on Debian, and the firmware was installed correctly.

There seems to be a problem with newer versions of Windows :/