Connect with us
Tesla hackers find a vulnerability with NFC relay attack Tesla hackers find a vulnerability with NFC relay attack

News

Tesla hackers find a vulnerability with NFC relay attack

Jeremy from Sydney, Australia, CC BY 2.0 , via Wikimedia Commons

Published

on

Tesla hackers have found a vulnerability with an NFC relay hack but there’s a catch. Thieves will have to work in pairs and get close to the NFC chip or smartphone.

According to IOActive, the relay attack needs two attackers. One uses the Proxmark device at the vehicle’s NFC reader. The other uses any NFC-capable device close to a Tesla owner’s NFC card or smartphone. The team is then able to use Bluetooth to communicate between the devices and replicate the key to one of the thieve’s smartphones.

This new demonstration comes a few days after the National Highway Traffic Safety Administration (NHTSA) recently released an update to its 2016 edition of its Cybersecurity Best Practices for the Safety of Modern Vehicles. Dr. Steven Cliff, NHTSA’s Administrator emphasized the need for cybersecurity to be a top priority for every automaker, developer, and operator.

According to the agency, a layered approach to vehicle cybersecurity reduces the probability of a successful attack while mitigating the ramifications of unauthorized vehicle system access. The NHTSA also added that public key cryptography techniques are more secure than symmetric keys valid across multiple vehicles.

Advertisement

In 2018, Tesla began rolling out the PIN to Drive feature and improved cryptography for its key fobs as a response to several Tesla vehicle thefts through relay attacks in Europe.

In 2019, Tesla began releasing over-the-air software updates addressing the findings of Lennert Wouters of Katholieke Universiteit Leuven in Belgium (KU Leuven). Wouters discovered a security flaw that allowed car thieves to clone a key fob in less than two seconds. Tesla’s solution included the PIN to Drive, a software update, and a new fob that made the Tesla Models S and X  almost 90% less likely to get stolen than the average car.

The new demonstration may show a vulnerability if thieves are dedicated enough to work at it, but Tesla is pretty fast at addressing these flaws. However, all car owners, whether they own an EV or not, should always be aware of their surroundings. You can watch IOActive’s demonstration video below.

Advertisement

Note: Johnna is a Tesla shareholder and supports its mission. 

Your feedback is important. If you have any comments, or concerns, or see a typo, you can email me at johnna@teslarati.com. You can also reach me on Twitter at @JohnnaCrider1.

Teslarati is now on TikTok. Follow us for interactive news & more.

Advertisement

Johnna Crider is a Baton Rouge writer covering Tesla, Elon Musk, EVs, and clean energy & supports Tesla's mission. Johnna also interviewed Elon Musk and you can listen here

Advertisement
Comments

News

Tesla pushes back against unfair reporting of accidents

Published

on

tesla
(Credit: Tesla)

Tesla is pushing back against the unfair reporting of accidents involving its vehicles. Many media outlets were quick to jump to conclusions about a fatal accident involving a Tesla in Katy, Texas, that happened recently.

The driver of the vehicle, which slammed into a brick house and killed a woman inside, stated the car was operating on Autopilot. Tesla CEO Elon Musk and Head of AI Ashok Elluswamy both challenged that claim, with Elluswamy revealing last night that the system was overridden by the driver, who pressed the accelerator pedal “all the way to 100%.”

Tesla finally clarifies fatal Texas crash, confirms driver manually overrode acceleration

The car reached a speed of 73 MPH during the crash, Elluswamy detailed, and stated that the accelerator pedal was even pressed after the crash.

Advertisement

The story has been spread throughout the media with either incomplete or incorrect reporting, with some stories still not updated nearly 24 hours after Musk and Elluswamy posted answers about the crash on X.

The reporting has been a thorn in the side of Tesla for several years. Vehicle accidents involving Teslas are usually reported with the manufacturer’s name in the headline, while other companies are free of criticism when their cars are involved in accidents.

Here’s an example of that:

Many media outlets stated the car was in “self-driving mode” or “Autopilot mode” when the car crashed. The truth is, now that Tesla has chimed in, that the driver had manually overriden the system by pressing the accelerator. Elluswamy commented on the unfair reporting:

“This blatantly irresponsible reporting does more harm to people than they realize.

Advertisement

Using Tesla self-driving is far safer than manual driving, and this was measured over 10B miles.

Planting such FUD in the minds of general public, who might not know the all the facts, might prevent them from using this technology that makes them safer.”

The damage these headlines do to Tesla and the self-driving car movement is unexplainable. Most people do not realize the safeguards that are in place with Tesla’s self-driving functions; many people who have used it know the car would never travel at that speed in a residential area, not even on the most aggressive “Mad Max” setting.

It is important to remember that Tesla Full Self-Driving is not autonomous, and the company never claimed it was. Drivers are still responsible for paying attention and remaining vigilant. They must be able to take over at all times.

Advertisement
Continue Reading

News

Tesla gets another layer of gamification with Free Supercharging on the line

Published

on

tesla-supercharger-diner
Credit: Tesla

Tesla Supercharging is getting yet another layer of gamification, as the company is rolling out a new competition that could win Free Supercharging miles.

Tesla is ramping up its efforts to make vehicle ownership more engaging through gamification. In June 2026, the company announced the 2026 Free Supercharging Competition, building on the Charging Passport feature introduced the previous year. This initiative turns Supercharging into a competitive, collectible adventure while offering substantial real-world incentives.

The Charging Passport, rolled out late last year, functions like a digital travel log or a year-in-review for Tesla owners. These types of things are used by many platforms, including Spotify and Apple Music, which show listeners what type of taste they had for the year.

Accessed in the Tesla App under the ‘Charging’ section, it displays a map of visited Superchargers, key stats, such as total energy charged (kWh), number of unique sites, total charging sessions, top charging day, and miles added. Owners earn collectible Charging Badges in categories, which include:

  • Charging Milestones – for total energy, consecutive weeks of Supercharging, or unique sites visited
  • Iconic Chargers – for Flagship Locations or stations near famous landmarks
  • Special Events – limited-time badges for specific experiences. These badges appear within 24 hours of qualifying activity and provide a fun, shareable recap of an owner’s Supercharging journeys. Milestone progress resets annually, allowing fresh challenges each year

The 2026 contest elevates this gamification by rewarding top performers with lifetime free Supercharging. All Supercharging sessions from January 1 to December 31, 2026, count toward the competition. To participate, owners must enable “Share Charging Data with Tesla App” in vehicle settings and open the 2026 Charging Passport in the app at least once before January 1, 2027.

Nine winners will be selected — three per region (Americas, Asia-Pacific, and EMEA, with some  countries excluded for regulatory reasons) — one in each of three categories:

Advertisement
  • Longest Trip: Longest continuous streak of unique Supercharger locations where each new site is visited within 24 hours of the previous session’s start time
  • Most Unique Supercharger Sites Visited: Highest number of distinct locations
  • Most Energy Supercharged: Highest total in kWh charged at Superchargers

A unique site is defined as shown in the Tesla app or vehicle navigation. Repeat visits during a streak are allowed but do not extend the count. Ties are broken by total energy charged. Ineligible participants include vehicles already receiving free Supercharging, commercial-use vehicles (taxi, rideshare, delivery), Tesla employees and their immediate families, and residents of certain excluded countries.

Winners receive free Supercharging on the winning vehicle for as long as they own or lease it.

This contest is part of Tesla’s broader gamification strategy. The Safety Score has long rewarded safe driving habits with a numerical rating that can influence insurance rates or feature access. The referral program incentivizes owners with credits or free Supercharging months for successful referrals.

In-app statistics, streaks, and community features further encourage engagement. Older third-party apps even awarded “mayor” titles for frequenting specific Superchargers.

By combining digital badges, competitive leaderboards, and high-value rewards, Tesla boosts network utilization, gathers usage data, and fosters deeper owner loyalty. The 2026 Free Supercharging Competition invites enthusiasts to plan epic road trips while turning everyday charging into a rewarding pursuit. With the Passport already proving popular, expect heightened activity across the Supercharger network throughout the year.

Advertisement
Continue Reading

News

Tesla tops American-Made Index for sixth-consecutive year

Published

on

Credit: Tesla

Tesla is atop the American-Made Index from Cars.com for the sixth-straight year, as the Model 3 and Model Y took the top two spots, respectively.

Last year, the Model 3, Model Y, Model S, and Model X took the top four spots, respectively. The company has routinely performed well in the Index. However, Tesla discontinued its flagship Model S and Model X earlier this year, which took the two cars out of the ranking.

Cybertruck is not considered due to its curb weight being above the 8,500-pound threshold, which eliminates it from being required to have more detailed assembly information.

Cars.com uses five main categories to develop its rankings:

Advertisement
  • Location(s) of final assembly
  • Percentage of U.S. and Canadian parts
  • Countries of origin for all available engines
  • Countries of origin for all available transmissions
  • U.S. manufacturing workforce

These five major factors are then put into a 100-point scale. The vehicles with the highest scores sit atop the list. The Model 3 edged out the Model Y.

Tesla uses a strong domestic strategy to build its cars and parts domestically. It relies on intense vertical integration that reduces its dependence on global suppliers, keeping more value and jobs in the United States.

Advertisement

This strategy has helped Tesla gain a strong reputation for domestically produced vehicles and parts. However, it helps it with more than just awards like this one. Keeping a supply chain local has also helped insulate Tesla more than others from tariffs and supply chain disruptions.

This year’s American-Made Index from Cars.com studied nearly 400 vehicles from the 2026 model year. Tesla was the only manufacturer to have an EV inside the Top 10. The Kia EV9 was the next EV to make the list, scoring the 17th position.

The Hyundai IONIQ 5 was 21st, and the final EV to make the list was the Cadillac LYRIQ in 77th.

Advertisement
Continue Reading