- Changes
- 4
- Tracking since
- May 2024
- Latest
- Mar 20, 2025
- Net movement
- Classification stable
- 2025
-
Ecovacs Deebot X2 Combo price reduced as X3 series enters market
Major US retailers reduced the Ecovacs Deebot X2 Combo price to the $1,199-$1,299 range in early 2025, coinciding with Ecovacs' announcement of successor flagship models including the X8 Pro Omni and T50 Max Pro.
Full assessment3 claims · 3 technical notes · 2 sources
Where it standsAutonomy LadderIIIIIIIVVLevel IIIConditional AutonomyHuman ReadinessReady NowNew to MarketWaitKnown IssuesRobovations Score04055708566CapableWhat happenedThe X2 Combo's hardware and software capabilities are unchanged; the reduction reflects standard generational pricing pressure.
WatchingNext: whether Ecovacs continues OTA updates for the X2 platform as newer models reach full retail availability.
Bottom lineThe price reduction makes the X2 Combo more accessible relative to its launch price, but prospective buyers should confirm Ecovacs' update support commitment before purchasing a product displaced by newer flagship releases.
ImpactOn autonomy
- No change to Level III navigation, mapping, or obstacle detection capability
- X2 Combo platform hardware unmodified by the price adjustment
On readiness
- Reduced retail price improves value position relative to launch MSRP
- X2 Combo now priced $300-400 below launch while X3 enters at higher tier
- OTA update continuity from Ecovacs not formally committed for legacy X2 units
Claim check3 maker claims checked against the record. Open one to read the finding.
X2 Combo remains the flagship Ecovacs combo vacuum
Documented findingWith the announcement of successor flagship models at CES 2025, the X2 Combo moved to a mid-cycle position in Ecovacs' lineup; Ecovacs marketing shifted focus to newer modelsFull software support continues for X2 platform
Documented findingEcovacs did not publish an explicit X2 software support commitment timeline when the X3 launched; owners should verify current firmware release cadence before assuming multi-year update supportPrice reduction reflects no change in product quality
Documented findingHardware and firmware are unchanged; price reduction reflects standard generational discounting, not a product defect or recallEvidence2 sources · all linked
121 Mar 202520 Mar 2025filed 20 Mar 2025- 1ECOVACS – DEEBOT X2 COMBO product page1 Mar 2025
- 2PCMag15 Mar 2025
Technical notes3 sectionsPrice Movement Context
The Ecovacs Deebot X2 Combo launched in April 2024 at a US MSRP of $1,599. By early 2025, major US retailers including Amazon and Best Buy listed the unit in the $1,199-$1,299 range. This followed Ecovacs’ announcements at CES 2025, which introduced successor flagship models and shifted the X2 Combo to a mid-cycle position in the lineup.
Hardware and Software Status
No hardware revision accompanied the price adjustment. The X2 Combo’s 8,000 Pa suction, LiDAR plus camera navigation, 3-liter auto-empty bag, and hot-water mop-wash station remain as originally configured. Firmware continued shipping on the existing X2 update channel.
Competitive Context
Newer flagship models entered the market at higher price tiers, with the X2 Combo effectively occupying the mid-tier combo slot in Ecovacs’ own lineup by Q1 2025. Third-party combo competitors (Roborock Combo and Dreame L20 Ultra Combo variants) were concurrently positioned in overlapping price ranges.
- 2024
-
Ecovacs ships Bluetooth security patch to X2 platform following DEF CON disclosure
Ecovacs pushed an OTA firmware update to X2 platform devices remedying the Bluetooth authentication gap that researchers disclosed publicly at DEF CON 32 in August 2024.
Full assessment3 claims · 4 technical notes · 2 sources
Where it standsAutonomy LadderIIIIIIIVVLevel IIIConditional AutonomyHuman ReadinessReady NowNew to MarketWaitKnown IssuesRobovations Score04055708566CapableWhat happenedThe update required no hardware changes and deployed automatically over Wi-Fi.
WatchingNext: whether Ecovacs publishes a formal security advisory with CVE attribution and patch versioning, and whether independent researchers verify the fix is complete.
Bottom lineThe patch represents a meaningful response to a documented vulnerability, but the absence of a formal CVE record and independent verification leaves some uncertainty about completeness.
ImpactOn autonomy
- No change to navigation, mapping, or obstacle detection capability documented
- Core Level III operational behavior confirmed unchanged post-update
On readiness
- Bluetooth-layer command injection vector addressed per Ecovacs firmware release notes
- Automatic OTA deployment reduces owner action required to receive the fix
- Privacy posture improved for households where Bluetooth proximity was a concern
Claim check3 maker claims checked against the record. Open one to read the finding.
Security patch fully resolves all DEF CON 32 findings
Documented findingEcovacs firmware release notes reference Bluetooth authentication improvements; independent researcher verification of completeness was not published at the time of the patch rolloutOTA update deploys automatically to all affected units
Documented findingAutomatic deployment confirmed for units connected to Wi-Fi with auto-update enabled; units offline or with auto-update disabled require manual update trigger via the Ecovacs Home appNo user action required
Documented findingAuto-update handles most cases, but owners should verify in-app that firmware is current; Ecovacs did not send a proactive push notification to all X2 owners at patch releaseEvidence2 sources · all linked
1210 Nov 202415 Nov 2024filed 15 Nov 2024- 1Ecovacs Support – Firmware Release Notes10 Nov 2024
- 2Vacuum Wars14 Nov 2024
Technical notes4 sectionsFirmware Update Context
Ecovacs distributed a firmware update to the X2 platform (covering X2 Omni and X2 Combo configurations) in late 2024 following the DEF CON 32 Bluetooth disclosure. The update targeted the Bluetooth Low Energy authentication layer that researchers had demonstrated as bypassable for unauthenticated command injection and camera access.
Deployment Method
The patch deployed via OTA (over-the-air) update to units connected to Wi-Fi with automatic updates enabled. No hardware modification or service center visit was required. Owners can verify installation via the Ecovacs Home app firmware version screen.
Known Limitations
Ecovacs did not publish a formal security advisory with a CVE identifier at the time of the patch release. The firmware release notes referenced Bluetooth authentication improvements without detailed change logs. Independent security researchers had not published a follow-up verification of the fix’s completeness as of the patch release period.
Scope
The update addressed the Bluetooth proximity attack vector. It did not alter cloud connectivity architecture or Wi-Fi security posture, which were not part of the DEF CON 32 disclosure.
-
Security researchers disclose Bluetooth vulnerabilities affecting Ecovacs X2 platform
Security researchers presented documented Bluetooth authentication weaknesses in the X2 platform at DEF CON 32, demonstrating unauthenticated command injection and camera access within Bluetooth range.
Full assessment3 claims · 4 technical notes · 2 sources
Where it standsAutonomy LadderIIIIIIIVVLevel IIIConditional AutonomyHuman ReadinessReady NowNew to MarketWaitKnown IssuesRobovations Score04055708566CapableWhat happenedEcovacs acknowledged the findings but did not publish a remediation timeline at disclosure.
WatchingNext: whether Ecovacs issues a firmware patch addressing Bluetooth authentication and whether the patch ships to the X2 Combo specifically.
Bottom lineThe vulnerabilities are real and documented; the risk is proximity-limited and does not enable remote internet-based attack, but the disclosure-to-patch gap raised questions about Ecovacs' security response cadence.
ImpactOn autonomy
- Disclosed vulnerability allows unauthenticated Bluetooth commands on the X2 platform
- Camera stream accessible to attacker within Bluetooth range without credentials
- No change to core navigation or mapping capability documented
On readiness
- Privacy risk elevated for households with sensitive environments or public-facing rooms
- Ecovacs did not publish a patch timeline at the time of DEF CON disclosure
- Owners advised to monitor Bluetooth proximity and disable camera features until patch confirmed
Claim check3 maker claims checked against the record. Open one to read the finding.
Ecovacs devices use secure cloud connectivity
Documented findingResearchers documented a Bluetooth-layer vulnerability independent of cloud security; the attack vector is local wireless, not cloud-based, and does not require internet access to exploitCamera features require app authentication to activate
Documented findingResearcher demonstration showed camera access was achievable without app authentication within Bluetooth range per DEF CON 32 presentation materialsEcovacs responds promptly to security disclosures
Documented findingResearchers reported the vulnerabilities to Ecovacs months before the conference; Ecovacs acknowledged but had not shipped a patch by the time of public disclosure at DEF CON 32 in August 2024Evidence2 sources · 1 linked
1210 Aug 202419 Aug 2024filed 11 Aug 2024- 1DEF CON 32 Presentation – Giese and Luedtke10 Aug 2024named, not linked
- 2Ars Technica19 Aug 2024
Technical notes4 sectionsVulnerability Summary
Security researchers presented findings at DEF CON 32 (August 2024) covering Bluetooth authentication weaknesses in multiple Ecovacs robot platforms, with the X2 series explicitly named. The disclosed issues included unauthenticated Bluetooth Low Energy command injection and the ability to activate and stream the onboard camera without app credentials.
Attack Vector
The exploit requires physical proximity within Bluetooth range (approximately 10 meters in open space). No internet connection or Ecovacs account credentials are needed for the attack. The vulnerability is not exploitable remotely over the internet.
Affected Models
Researchers identified the X2 platform (covering both X2 Omni and X2 Combo configurations) as affected. Other Ecovacs models were also referenced in the presentation as sharing related architecture.
Ecovacs Response at Disclosure
Ecovacs issued a public statement acknowledging the findings and indicating a firmware patch was in development. No specific version number or release date for the patch was provided at the time of the DEF CON 32 presentation. Subsequent reporting indicated the patch shipped in late 2024.
-
Ecovacs Deebot X2 Combo launches at retail in North America
Ecovacs began North American retail shipments of the Deebot X2 Combo in April 2024, introducing a bundled detachable handheld vacuum integrated into the same auto-empty and mop-washing station.
Full assessment4 claims · 4 technical notes · 2 sources
Where it standsAutonomy LadderIIIIIIIVVLevel IIIConditional AutonomyHuman ReadinessReady NowNew to MarketWaitKnown IssuesRobovations Score04055708566CapableWhat happenedThe Combo variant differs from the X2 Omni primarily in the dock design and included stick unit.
WatchingNext: whether the detachable stick gains independent firmware update support or remains tied to the base unit's OTA cycle.
Bottom lineThe Combo dock integration is genuine and reduces daily maintenance steps, but the handheld unit is a convenience accessory, not a replacement for a dedicated stick vacuum.
ImpactOn autonomy
- LiDAR plus camera navigation maps up to 3,500 sqft per session without interruption
- Automatic carpet recognition lifts mop pad without manual zone setup
- AI obstacle detection identifies and avoids objects mid-run on known floor plans
On readiness
- Retail availability confirmed across major US retailers at launch
- One-dock integration eliminates need for separate handheld charging base
- Auto-refill and hot-water mop-wash reduce between-run maintenance to water-tank checks
Claim check4 maker claims checked against the record. Open one to read the finding.
All-in-one dock eliminates need for any separate accessories
Documented findingManufacturer docs confirm dock handles auto-empty, mop-wash, and handheld charging, but a separate water supply line or manual tank-fill is still required; fully hands-off operation requires plumbed installationHandheld unit delivers full stick-vacuum suction
Documented findingOwner reports and product specs document the detachable stick operates at reduced suction compared to dedicated corded units; convenient for spot cleaning but not deep edge workHot-water mop cleaning sanitizes floors
Documented findingManufacturer describes the system as hot-water mop wash for pad hygiene, not floor sanitization; temperature is sufficient to clean pads, not to sterilize floor surfaces per health standardsAutomatic carpet detection prevents mop pad contact on all rugs
Documented findingOwner reports confirm reliable detection on standard loop pile; high-pile and shag rugs require manual no-mop zones in the appEvidence2 sources · all linked
12Apr 2024May 2024filed 10 May 2024- 1Ecovacs Press Release15 Apr 2024
- 2The Verge18 Apr 2024
Technical notes4 sections
Platform Overview
The X2 Combo shares the square-body X2 platform with the X2 Omni. Navigation uses LiDAR plus a forward-facing camera with AI obstacle detection, supporting multi-floor map storage and room-level scheduling. Suction is rated at 8,000 Pa on the main robot unit.
Dock Hardware
The station integrates auto-empty (3-liter sealed dust bag), hot-water mop-pad washing, auto-refill from a 5-liter clean-water tank, and a cradle for the detachable handheld vacuum. The dock footprint is approximately 24 inches wide and requires 20-30 inches of clearance for the mop-wash arm cycle.
Handheld Unit
The stick-vacuum detaches from the right side of the dock and operates on its own battery. Manufacturer specs do not publish a Pa rating for the stick mode; owner reports describe suction as adequate for spot cleanup but weaker than the main robot’s 8,000 Pa. Charging is handled by returning the unit to the dock cradle.
Connectivity
Wi-Fi (2.4 GHz primary, 5 GHz supported), Bluetooth for initial pairing, and HomeKit compatibility confirmed at launch. MSRP: $1,599.