The MILELRS v2.30 firmware introduces substantial upgrades based on ExpressLRS 3.3.2. These upgrades expand functionality and harden drones against RF-based attacks, interference, and interception, while improving resilience in denied environments. The firmware significantly enhances drone C2 survivability and allows flexible deployment under contested conditions. Its feature set introduces expanded threat dimensions, refined targeting options, and hardened communication mechanisms.
MILELRS broadens RF-layer attack surfaces through signal manipulation, frequency obfuscation, and link redundancy. Targets include adversary drones, command posts relying on WiFi- or LoRa-based telemetry, ISR systems attempting spectrum profiling, and defensive RF fences seeking to jam or spoof drones. The firmware’s ability to reassign telemetry and control bands, embed unique keys for access control, and switch links dynamically across three frequencies aligns with offensive EW and cyber-electromagnetic strategies.
The firmware introduces an EW_SCANNER, allowing signal detection and mapping across a defined RF range through a remote switch. This tool exposes hostile RF emissions, including jammers and spoofers. Operators define frequency sweep parameters and control channels, enabling real-time threat sensing. CUSTOM_FREQ_TELEM detaches telemetry traffic from control bands, forcing interceptors to scan additional ranges to detect flight data. This undermines RF fingerprinting and frustrates signal triangulation.
MULTI_BAND allows simultaneous use of up to three paired TX-RX channels on independent frequency bands. These links operate concurrently. If one channel drops, another maintains transmission without interruption. VRX_CONTROL enables remote management of video receiver channels, providing fast-spectrum relocation to avoid known surveillance frequencies. It accepts up to eight programmed frequencies per VRX band and reacts to signal input on a designated control channel.
FAILSAFE programming supports two-phase automated response on signal loss. On detection, the system first freezes existing control values. If communication does not resume within a user-defined delay, it initiates new channel settings such as altitude changes, rerouting, or payload activation. FAILSAFE accepts ten command fields, including control channel, delay in milliseconds, and pairs of new control values. This function enables preconfigured kamikaze behaviors or route adjustments based on mission profiles.
The firmware mandates unique RX_KEY and TX_KEY encryption values per module, generated and assigned by the drone manufacturer. These replace traditional binding phrases and block module spoofing. Cloning or signal injection fails without correct TX_LOCK values tied to individual module IDs. The configuration blocks module reuse by adversaries and supports forensic tracking of compromised devices. Once set, keys also double as WiFi passwords, changing SSIDs and securing web access to module configuration.
LoRa modulation rates are expanded from standard 25 Hz to additional slow modes: 14 Hz, 24 Hz, 42 Hz, and 84 Hz. These use increased error correction, boosting reliability in low-SNR environments. The 14 Hz mode supports greater sensitivity, which favors long-range or static deployments like ground drones and ISR balloons. While latency increases, command integrity in sparse signals improves. These low-rate profiles are ideal for strategic ISR or one-way weaponized systems.
Custom telemetry and control frequency assignments allow packets to be distributed across two different frequency bands. For example, a control band of 740 to 760 MHz and a telemetry band of 850 to 870 MHz forces adversaries to monitor both ranges in parallel. Second frequency ranges enable drones with dual receivers to alternate or parallelize packet reception, with one antenna tuned to each band. Broad-spectrum ground transmitters like Yagi antennas increase coverage but reduce pinpointing accuracy by defensive EW.
The LUA scripting interface on the handheld controller supports real-time frequency reconfiguration of both RX and TX modules. Users select new frequency parameters directly and push updates over the air. The modules reboot after changes, but the connection is restored automatically if parameters match. This enables operators to shift frequency bands while airborne to avoid detection or jump out of a jammed spectrum zone. Frequencies, LoRa rate, and modulation parameters can all be altered mid-mission.
EW_SCANNER management tools display detected RF signatures from 730 to 1020 MHz. When enabled, the scanner watches RF noise and presents results through a local IP address. The operator sees which bands carry anomalies or spikes, indicating interference or jamming. RSSI readouts can be modified to show EW signal strength instead of standard link RSSI. In dual-receiver modules like Happymodel ES900 Dual RX, this allows channel selection based on minimal interference.
The firmware relies on tight control over dissemination. According to the instructions, users are warned not to distribute compiled firmware broadly. Instead, they are encouraged to share it only with verified individuals or through encrypted Signal contacts. Firmware updates are distributed through a private Telegram channel. Each module requires unique credentials, locking configuration to individual drones and limiting third-party replication. The firmware enforces strict access and cloning protections, preventing adversaries from harvesting configurations off captured units.
Basic configurations such as static frequency ranges, open telemetry channels, and single control links are replaced with encrypted, adaptive, and decentralized link management. The firmware shifts operational behavior from hobbyist-grade C2 to hardened battlefield C2. Where earlier systems used a shared passphrase, MILELRS demands unique keys per module. Where legacy systems coupled telemetry and control, MILELRS splits these into distinct, programmable bands. Where other systems used fixed frequencies and single transmitters, MILELRS supports multiple bands, multi-pair redundancy, and dual-antenna reception.
The firmware’s spread-spectrum-like behavior, resistance to spoofing, programmable failover response, and obfuscated telemetry position it as a high-functionality control solution for drones in adversarial spaces. Its security mechanisms harden drone fleets against hostile EW, hijacking, and telemetry sniffing. The system also includes built-in detection against RF interference and dynamic modulation schemes designed to prevent spectral profiling.
The firmware closes with a change log showing progressive hardening over time. Version 2.30 introduces expanded failsafe, configuration reliability, and remote control of signal parameters. Previous versions added frequency configuration, multiband control, encrypted signal links, and signal scan. The evolution trajectory indicates a focused development goal of creating a resilient, secure, and programmable communications framework for autonomous or semi-autonomous drones operating in high-risk RF environments. When installed on commercial UAV platforms, MILELRS transforms them into hardened, adaptable ISR and offensive platforms capable of surviving contested electromagnetic environments.
The MILELRS v2.30 firmware supports a wide range of unmanned aerial vehicles (UAVs), specifically those using ExpressLRS-compatible modules. These include fixed-wing aircraft, quadcopters, long-range FPV drones, and hybrid ISR/strike platforms used in both commercial and military-grade systems. The firmware supports transmitter (TX) and receiver (RX) modules that are found across DIY platforms, paramilitary-grade drones, and custom-built UAVs used by non-state actors, irregular forces, and state proxies.
The firmware is compiled specifically for TX and RX hardware modules from the following manufacturers:
Supported TX Modules (Transmitters):
HappyModel ES900 TX, HappyModel ES900 Max TX, BETAFPV 900 MHz Micro TX, BETAFPV 900 MHz Nano TX, EMAX OLED 900 MHz TX, RadioMaster Bandit Micro 900 MHz TX, CYCLONE 900 MHz Micro TX, RadioMaster Ranger Micro 2.4 GHz TX, BETAFPV 2.4 GHz 1W Micro TX, BETAFPV 2.4 GHz Micro TX, EMAX OLED 2.4 GHz TX, HappyModel ES24 2.4 GHz TX
Supported RX Modules (Receivers):
HappyModel ES900 RX, BETAFPV 900 MHz RX, RadioMaster BR1 900 MHz RX, NeutronRC 900 MHz RX, AION Mini 900MHz RX, iFlight 900 MHz Nano RX, HiYOUNGER 900 MHz RX, HGLRC Hermes 900 MHz RX, BAYCKRC 900 MHz Nano RX, GEPRC Nano 900 MHz RX, Foxeer 900 MHz RX, EMAX 900 MHz RX, HappyModel ES900 Dual RX, GEPRC True Diversity 900 MHz RX, BETAFPV SuperD 900 MHz RX, BAYCKRC dual-core 900 MHz RX, RadioMaster BR3 Diversity 900 MHz RX
At 2.4 GHz, supported receivers include BETAFPV SuperD 2.4 GHz RX, GEPRC 2.4 GHz dual-diversity RX, BAYCKRC 2.4 GHz dual-core RX, Anyleaf 2.4 GHz dual RX, HappyModel EP1/EP2 2.4 GHz RX, RadioMaster RP1, RP2, RP3, RP4-TD, BETAFPV AIO RX, Lite RX, JHEMCU EP24S, iFlight Nano RX, Foxeer Lite RX, GEPRC Nano SE RX, MATEK R24-S and R24-D, JHEMCU RX24T
These modules are frequently embedded in UAVs from manufacturers like GEPRC, iFlight, Foxeer, and BETAFPV. These manufacturers produce drone frames and integrated UAVs used for FPV racing, long-range reconnaissance, payload delivery, and loitering munition functions. Many of these UAVs are seen in asymmetric conflict zones including Ukraine, Syria, Yemen, and Iraq.
For example, the GEPRC and iFlight platforms are commonly reconfigured by Russian and Iranian-aligned militias with added payloads, extended battery packs, and thermal optics. The integration of MILELRS firmware into these platforms equips them with encrypted long-range control, dual-band telemetry, and anti-jamming measures, which are particularly useful for ISR drones operating near GPS-denied or EW-heavy zones.
Additionally, the use of dual-frequency modules such as the HappyModel ES900 Dual RX supports redundant control signal reception, which is crucial for swarm UAVs or long-endurance ISR drones that traverse jamming corridors or experience intermittent link degradation.
MILELRS is designed for UAVs built on ExpressLRS-compatible hardware used across both recreational and operational domains, including military-grade modified commercial drones used in asymmetric warfare, loitering munition drones with one-way flight paths, long-range reconnaissance FPVs, and swarming multi-unit configurations deployed by irregular forces.
