On November 4, 2026, X user kiraequal performed ADB dynamic forensics and DEX reverse engineering on a locked-bootloader Xiaomi 13 Pro (HyperOS 3.0). They discovered that the system's Security Center contains a built-in anti-fraud database named 'fraud_detection_data.db', where the 'voip_record' table involves silent screen recording logs of QQ and WeChat voice and video calls. [Follow-up · November 4, 2026] On November 4, X user KiraEqual posted after disassembling a Xiaomi 13 Pro running HyperOS 3.0, stating that the pre-installed anti-fraud component can record screens, record audio, and log network call details without triggering any authorization pop-ups. Another researcher verified that on some models, screen recording covers the entire screen, and even after turning off the protection switch, the screenshot time is still recorded.