There was an interesting reverse engineering talk about tonieboxes on last years chaos communication congress [1]

It's in german and I can't speak to the quality of the english translation which is available

[1] https://media.ccc.de/v/37c3-11993-toniebox_reverse_engineeri...