• Welcome to RCTalk! 🚀

    Join the #1 RC community where hobbyists connect, share, and get expert advice on RC cars, trucks, boats, drones, and more!

    • Friendly & passionate RC enthusiasts
    • RC tips & troubleshooting
    • Buy, sell & trade RC gear
    • Share builds & upgrades

MT12 + ELRS Serious Incident -> Full Throttle Runaway -> Solution

This site may earn a commission from merchant affiliate
links, including eBay, Amazon, and others.

Arma

RCTalk Member
Messages
28
Reaction score
43
Points
73
RC Driving Style
  1. Bashing
  2. Crawling
  3. Flying
Hey guys, just dropping this here in case it saves someone else from what happened to me — a full-on, bash/blast throttle runaway with my SCX6 powered by a RadioMaster MT12 and ELRS.

It's always better to learn from someone else's mistakes.

I haven't found any information regarding the runaways until I got motivated (after my SCX6 hit my shin) to dig deeper.

🚨 The Incident:​

MT12 v2.10.6 (latest as of now 2.11.1)
ER5C v2 3.3.1 ((latest as of now 3.5.5)
Model: SCX6

While running my SCX6, I suddenly experienced a full throttle runaway while standing 2m (7ft) from the model. The rig went completely out of control and didn’t stop until the RX rebooted and connected to the TX after 3 about seconds.

Other people are reporting either full throttle runaways mid-drive or signal loss / RX reboots when stationary with no throttle input.

After some digging, I realized the RX ignores the correctly configured failsafe and sends unsafe signal to the ESC.

🔍 The Root Cause:​

Turns out, when Radiomaster ELRS RX loses signal or reboots (mid-drive) by itself for at the moment unknown reasons, the default PWM output spikes to 2000 µs, which ESCs interpret as full throttle.

The issue is especially common with PWM receivers like the ER3C(i)/ER5C(i)/ER5C-V2 (3.3.0+).

✅ The REAL Fix:​

After further testing and research (and some excellent community feedback - thx u/sonic192), it looks like that the single most reliable way to prevent full-throttle runaways or glitches with ELRS and the MT-12 is to set up a dedicated ARM switch on Channel 5 (AUX1) - https://www.expresslrs.org/software/switch-config/

What this means is: you assign a physical switch on your radio (I used SD with logical toggle - use Stky, but any switch works) to Channel 5, and configure your transmitter so the car is only “armed” (and able to move) when you explicitly flip that switch. When disarmed, the receiver does not send throttle commands to the ESC—no matter what else happens (including brownouts, glitches, or reboot events). If you lose signal or the receiver reboots, it defaults to “disarmed,” which means the car stays safe and immobile. It even cuts off power mid-drive if you flip it. Of course TX start up is default disarmed.

I’ve now implemented this setup and confirmed that the throttle is 100% locked out when disarmed, but instantly responsive when armed. No more runaways, ever—even if something goes wrong with the radio link or power. For anyone using MT12 and ELRS and a surface vehicle, I highly recommend making the ARM switch on Channel 5 your very first safety step. It’s easy to set up and makes your rig much safer for you and everyone around you. I suggest adding Special Functions - LED and Tracks to the ARM switch.

And of course, always update:

  1. RX firmware
  2. Internal MT12 ELRS module firmware
  3. MT12 firmware
Hope this helps someone stay safe out there. Let me know if you need help setting yours up.
 
Last edited:
Throttle (CH2) → 988 µs (as Brake - if you are using Forward/Brake/Reverse)

IMG_EF6096AA-F7F2-490F-ABE3-8202CCA0B2B1.webp
 
Last edited:
I don't use the ELRS and haven't had mine long. I do notice telemetry loss warnings when I am really close to the vehicle. The other day I kept getting a RX signal warning when the car was pretty far away. The RX is a Radiolink though. I wouldn't say the learning curve is too crazy, any Ol fool can figure the MT12 out.
Is this fix good for the non ELRS?
 
Last edited:
I don't use the ELRS and haven't had mine long. I do notice telemetry loss warnings when I am really close to the vehicle. The other day I kept getting a RX signal warning when the car was pretty far away. The RX is a Radiolink though. I wouldn't say the learning curve is too crazy, any Ol fool can do figure the MT12 out.
Is this fix good for the non ELRS?
You are right anyone can learn left/right and press throttle. I was talking about custom functions because it took me a little while (couple of hours) to understand the logic of EdgeTX for cars (I came from air RCs) and before I polished my first lua script, it took me a couple of days and many tries - it's mostly the limitations of EdgeTX and the small BW display than some crazy complexity (I'm used to working on complex systems).

Now back to your issue:
Are you saying you are getting loss warnings with MT12 4-in-1 and Radiolink RX?
Fw versions of both?
Is the loss of signal caused by a brownout and the RX rebooting?
 
You are right anyone can learn left/right and press throttle. I was talking about custom functions because it took me a little while (couple of hours) to understand the logic of EdgeTX for cars (I came from air RCs) and before I polished my first lua script, it took me a couple of days and many tries - it's mostly the limitations of EdgeTX and the small BW display than some crazy complexity (I'm used to working on complex systems).

Now back to your issue:
Are you saying you are getting loss warnings with MT12 4-in-1 and Radiolink RX?
Fw versions of both?
Is the loss of signal caused by a brownout and the RX rebooting?
Yes, loss warnings with the 4in1 and a radiolink receiver.
No loss at all with the radiomaster rx that came with it however, so it could be a radiolink thing again.
It has the latest firmware.
I doubt the brown out.
 
so it could be a radiolink thing again.
Oh dang now their receivers have issues? Yea they're cheap and made poorly so I guess that's why.
That's also why I completely moved away from using their products. Heck radiolink receivers are made soooo poorly that the bind button just separates on the receiver board and it can't be bound again. That's what happened to 2 of my receivers. And the cases crack. Poor quality.
 
Guys, I was trying to investigate and understand more and have edited the original post as I was wrongly assuming the RX comes incorrectly configured by default. But that's not the case - it's actually worse. On reboot, it sends junk signal to the ESC while ignoring the failsafe settings.

Some people suggest the solution may be relocating the Throttle to higher channels - I haven't tested it yet, I'll keep the original configuration for now and see if the new fw have resolved the issue if / when another signal loss appears.
 
I’ll admit I have not figured how to set a fail safe but I did figure out a kill switch.
I have not figured out how to get battery voltage in telemetry. I have never noticed any signal loss on that particular car when it had both radiolink rx and tx. The radiomaster seems very sensitive.
 
Any carbon fiber on your rig?
If that was for me then...
On the: DB48 - None - kept getting a rx signal low warning at a far distance using a radiolink R6F rx
: Dirty30 Truck - None - with no issues so far using the radiomaster rx
: Kei Truck - Carbon Fiber Chassis rails - no issues yet using a Radiolink R6F rx but I only drove it once
Guys, I was trying to investigate and understand more and have edited the original post as I was wrongly assuming the RX comes incorrectly configured by default. But that's not the case - it's actually worse. On reboot, it sends junk signal to the ESC while ignoring the failsafe settings.

Some people suggest the solution may be relocating the Throttle to higher channels - I haven't tested it yet, I'll keep the original configuration for now and see if the new fw have resolved the issue if / when another signal loss appears.
Is there a video you can link to how you solve this?
 
kept getting a rx signal low warning at a far distance using a radiolink R6F rx
By "far" I mean about 60-70 Ft down our neighborhood street - I don't feel the need to drive things down the road to where I can't see them 😁
 
By "far" I mean about 60-70 Ft down our neighborhood street - I don't feel the need to drive things down the road to where I can't see them 😁
ok.
so you get a signal low warning from that far but is it dropping out or having slow reaction times from that distance?
could just be that the setting to trigger the warning was set too high and it can truly go farther before triggering the warning. Just my thought if it wasn't dropping out or anything.
 
ok.
so you get a signal low warning from that far but is it dropping out or having slow reaction times from that distance?
could just be that the setting to trigger the warning was set too high and it can truly go farther before triggering the warning. Just my thought if it wasn't dropping out or anything.
Good point, maybe an adjustment needs to be made. I didn't notice anything dropping out or glitchy out that far.
I didn't mention that part earlier and I probably should have.
 
If that was for me then...
On the: DB48 - None - kept getting a rx signal low warning at a far distance using a radiolink R6F rx
: Dirty30 Truck - None - with no issues so far using the radiomaster rx
: Kei Truck - Carbon Fiber Chassis rails - no issues yet using a Radiolink R6F rx but I only drove it once

Is there a video you can link to how you solve this?
Good idea - maybe I'll make a video about it. I have just re-calibrated my ESC and will be full testing tomorrow both rigs where I use the ELRS.
 
Hey guys, I'm updating the post.. it looks like we have the solution.

✅ The REAL Fix:​

After further testing and research (and some excellent community feedback), it looks like that the single most reliable way to prevent full-throttle runaways or glitches with ELRS and the MT-12 is to set up a dedicated ARM switch on Channel 5 (AUX1) - https://www.expresslrs.org/software/switch-config/

What this means is: you assign a physical switch on your radio (I used SD with logical toggle - use Stky, but any switch works) to Channel 5, and configure your transmitter so the car is only “armed” (and able to move) when you explicitly flip that switch. When disarmed, the receiver does not send throttle commands to the ESC—no matter what else happens (including brownouts, glitches, or reboot events). If you lose signal or the receiver reboots, it defaults to “disarmed,” which means the car stays safe and immobile. It even cuts off power mid-drive if you flip it. Of course TX start up is default disarmed.

I’ve now implemented this setup and confirmed that the throttle is 100% locked out when disarmed, but instantly responsive when armed. No more runaways, ever—even if something goes wrong with the radio link or power. For anyone using MT12 and ELRS and a surface vehicle, I highly recommend making the ARM switch on Channel 5 your very first safety step. It’s easy to set up and makes your rig much safer for you and everyone around you. I suggest adding Special Functions - LED and Tracks to the ARM switch.

And of course, always update:

  1. RX firmware
  2. Internal MT12 ELRS module firmware
  3. MT12 firmware
 
Alright guys so the mystery is resolved, just received a reply from one of the devs:
The issue is that those receivers use an ESP8285 as the MCU. This chip does not have native PWM outputs, it's emulated using a timer which flips the state of the GPIO pin. So if the RX is rebooting then the pin will be in whatever state it was when that happened. Also, the ESP8285 outputs a series of pulses on some of it's pins during boot, this is part of the bootloader ROM which we cannot change. Along with that, the TX pin (channel 2) spews out some bootup information at 74880 baud, again form the bootloader ROM. On getting a signal loss, the RX will enter failsafe mode and set the PWM outputs to whatever you have configured. If it's not doing that and random data is being sent out the pins then that means the RX has rebooted and there's not much we can do about that!

Which means.. Key points:
Safe:
  • RadioMaster ER6(G) / ER8(G) - STM32F103
  • Matek ELRS-R24-P6 - STM32
  • BetaFPV SuperP Series (Lite) - STM32/ESP32
  • HappyModel EPW6/EPW8 (latest) - ESP32-C3
Unsafe:
  • BETAFPV PWM 2.4GHz RX (esp8285)
  • BETAFPV SuperP 14Ch 900MHz RX (esp32 + pin 1)
  • HappyModel EPW5 2.4GHz PWM RX (esp8285)
  • HappyModel EPW6 2.4GHz PWM RX (esp8285)
  • MATEK R24-P PWM 2.4GHz RX (esp8285)
  • RadioMaster ER4 2.4GHz PWM RX (esp8285)
  • RadioMaster ER5A/C 2.4GHz PWM RX (esp8285)
 
Alright guys so the mystery is resolved, just received a reply from one of the devs:


Which means.. Key points:
Safe:
  • RadioMaster ER6(G) / ER8(G) - STM32F103
  • Matek ELRS-R24-P6 - STM32
  • BetaFPV SuperP Series (Lite) - STM32/ESP32
  • HappyModel EPW6/EPW8 (latest) - ESP32-C3
Unsafe:
  • BETAFPV PWM 2.4GHz RX (esp8285)
  • BETAFPV SuperP 14Ch 900MHz RX (esp32 + pin 1)
  • HappyModel EPW5 2.4GHz PWM RX (esp8285)
  • HappyModel EPW6 2.4GHz PWM RX (esp8285)
  • MATEK R24-P PWM 2.4GHz RX (esp8285)
  • RadioMaster ER4 2.4GHz PWM RX (esp8285)
  • RadioMaster ER5A/C 2.4GHz PWM RX (esp8285)
Thanks for all the help here. Very much appreciated!
 
Back
Top