An unofficial Even G2 flasher now offers only Even's own firmware, and bars custom builds
An independent browser tool for the Even Realities G2 glasses and R1 ring started publishing Even's own official firmware images on October 9, and it keeps custom builds out on purpose. The project's README says it "recognizes and offers all 16 archived official G2 SHA-256 values" and that "custom firmware is excluded from the catalog and both installation paths". It was read at 21:38 UTC on October 10. Even Realities has no part in the project.
The Even Realities G2 A and G2 B frames side by side. The project's catalogue covers glasses firmware, the charging case and the R1 ring separately. Image: Even Realities
That is an unusual position for a project of this kind. Even's glasses update through Even's own phone app and nowhere else, so a third-party route is normally where custom builds appear. Here the commit history runs the other way: a commit on August 21 is titled "Remove custom firmware support", and the October 9 commit that opened the official catalogue is titled "Publish official G2 and R1 updates with stock recovery safeguards". It landed at 19:18:28 UTC and was the first commit since September 15. The repository showed 14 stars when it was read.
What the project says it handles
The README describes two transports. Web Bluetooth is the primary one for the glasses, which the project calls Easy Mode, and the charging case is reached over its WCH CH340/CH341 USB serial interface, identified as 1A86:7523, through Web Serial or a CH340-specific WebUSB transport. On the ring side it offers "all 12 archived official R1 releases through signed Nordic Secure DFU", and says "bootloader unlocking and owner-key replacement are not included".
Before anything is written, it downloads what it calls a combined recovery set: a complete 512 KiB backup of the case flash, the 128-byte case option block, identity snapshots from both temples and the matching official glasses firmware bundle for each route. Case images are staged in the inactive flash bank and read back byte for byte before activation becomes available, and activation requires the operator to type a confirmation string. The README also says device communication and firmware validation happen locally, and that case data and uploaded firmware files "stay local in the browser", which is the project's own description of its own code rather than an audited finding.
Most of what the tool does is reading rather than writing. The README lists case firmware, battery and charging telemetry, lid state, USB state, whether the glasses are present, temperature, the STM32 ROM bootloader identification, the option bytes and which flash bank holds which image, plus per-temple firmware version, hardware revision, battery and voltage captured as checksum-valid raw frames. It also warns owners not to publish the backup file it produces, because it can contain identifiers, provisioning data and embedded firmware.
The project draws a hard line of its own
The README is blunt about what the tool is not: "This is a charging-case recovery and running-temple reinstall tool. It is not a dead-temple recovery tool." The reason it gives is that the stock case firmware exposes no USB command that writes glasses firmware to an unresponsive temple, so the case can power, reset and check a temple but not revive one.
Nothing in the archive is endorsed, acknowledged or published by Even Realities, and every version label in it is the project's own rather than a vendor release note. Even distributes firmware through its own app, which is how version 2.3.2 of that app came to require new firmware on both the glasses and the ring, and it publishes no changelog for the images themselves. The project's answer is a narrow one: keep the images it says Even signed, refuse everything else, and take a full backup of the charging case before writing anything.
