Red Magic 10 Pro (NX789J)

Modding knowledge base for the Red Magic 10 Pro, codename NX789J (Global) / NX789S (China overclocked variant — same kernel, different config). Snapdragon 8 Elite (SM8750) platform.

Don't update

Freeze the system updater before doing anything else. Newer firmware patches the exploits the unlock depends on — confirmed, and already shipping — and destructive hardware fusing remains the longer-term threat. Crucially, an update doesn't relock your bootloader; it takes away EDL, which is the only write path these phones have. See Known issues — the fusing threat and what updating actually costs.

Quick links

Just bought the phone / haven't unlocked yet

1. Overview — variants, versions, what works
2. Bootloader unlock status — current procedure, history
3. ZTE Family Toolbox — the canonical unlock tool

Already unlocked, want root

1. Root with Magisk / KernelSU — four paths depending on your setup
2. Partitions, AVB, vbmeta — what's safe to modify

Bricked, need to recover

1. EDL / 9008 mode — entry methods, drivers, tools
2. BD_Security's EDL root guide — recovery procedure with code

Going deeper

1. Kernel source — building from NX789S sources
2. Reverse engineering — abl_eng / ztecfg / RSA signing
3. Custom recovery — OrangeFox (decryption working) and Reminon's TWRP tree

Want to keep BL locked

• De-Googling without root — what you can do on stock
• Root with locked BL — EDL-flash patched init_boot + vbmeta

Reference

• Known issues & bricks
• Contributors