Red Magic 10 Pro (NX789J)
Modding knowledge base for the Red Magic 10 Pro, codename NX789J (Global) / NX789S (China overclocked variant — same kernel, different config). Snapdragon 8 Elite (SM8750) platform.
Don't update — and keep your current bootloader images
Freeze the system updater before doing anything else. Newer firmware patches the exploits the unlock depends on — confirmed, and already shipping — and destructive hardware fusing remains the longer-term threat. Crucially, an update doesn't relock your bootloader; it takes away EDL, which is the only write path these phones have.
On the RM11 family that patch turned out to be reversible by flashing pre-patch abl + efisp back, which makes your current, un-patched partition images worth saving right now — see keeping your pre-patch images. No such method exists for the RM10 Pro yet, so the advice here is unchanged: stay put, and take a copy while you can.
See Known issues — the fusing threat and what updating actually costs.
Quick links
Just bought the phone / haven't unlocked yet
- Overview — variants, versions, what works
- Bootloader unlock status — current procedure, history
- ZTE Family Toolbox — the canonical unlock tool
Already unlocked, want root
- Root with Magisk / KernelSU — five paths depending on your setup
- Partitions, AVB, vbmeta — what's safe to modify
- Play Integrity & attestation — keeping (or repairing) Wallet and banking apps
Bricked, need to recover
- EDL / 9008 mode — entry methods, drivers, tools
- BD_Security's EDL root guide — recovery procedure with code
Going deeper
- Kernel source — building from NX789S sources
- Reverse engineering — abl_eng / ztecfg / RSA signing
- Custom recovery — OrangeFox (decryption working) and Reminon's TWRP tree
Want to keep BL locked
- GhostLock — temporary root on stock firmware, nothing flashed
- Root with locked BL — EDL-flash patched init_boot + vbmeta
- De-Googling without root — what you can do on stock