Public winner write-ups and tooling notes
The repository preserves first, second, and third winner write-ups plus serial, picotool, BOOTSEL, and debugging guidance for people replaying the hardware CTF.
SourceLifecycle
Badge ecosystems keep moving after handout: apps, hexpansions, SAOs, antennas, cases, repair parts, firmware updates, and post-event hardware experiments.
The repository preserves first, second, and third winner write-ups plus serial, picotool, BOOTSEL, and debugging guidance for people replaying the hardware CTF.
SourceAfter the conference, a badge-number form could output correct hashes to unlock all challenges and add-ons such as Pong, WiFi scanner, and animations.
SourceHackaday documented that the badge could identify as a USB HID keyboard and operate as a configurable macro pad after the event.
SourceThe badge could print button, click, and NFC events over USB, accept content over USB, and work with a repository script that forwarded Linux desktop notifications to the badge.
SourceThe 2016 report describes a Pimp My Badge workshop using the previous year's electronic badge and updating the standard library with additional examples.
SourceThe official wrap-up says riverside and Holly helped fix an electrical issue with all badges by hand, without identifying the fault, exact repair, or attendee impact.
SourceLepi Labs' repository named 5-dc34-canary-badge contains native KiCad board/schematic material and a PlatformIO Arduino source tree with components matching the source-described Canary. The source is useful technical provenance, but no reviewed maker page links it directly to the sold product, and its release page reports no releases. It is not treated as a final v1.0 event firmware, final board revision, calibration record, safe operating guide, or source license.
SourceThe MT3608 boost converter raises the badge's 5 V supply to the 9 V rail used by the RF detector, and must be adjusted before the RF module is connected.
SourceThe builder describes LiPo 1S, integrated charging, under-voltage lockout, automatic USB-serial RESET/EN control, exposed UART0, and an extra screen-ground MOSFET on some boards. The account does not establish cell capacity, charge settings, board-revision coverage, electrical testing, safe modification, or a production-service procedure.
SourceThe public design notes describe USB or 1S LiPo operation, USB charging, CH340G USB serial, a power switch, and regulator/charger components.
SourceProject details and build logs document two CR123A cells, diode reverse-polarity protection, battery tests, WS2812B failure observations, and boards chainable by VCC, ground, and LED data output.
SourceThe user guide documents battery connection during setup, USB Power Delivery charging with a 9V/3A minimum, SSH access, RGB LED shutdown behavior, and 3D-printing button-tolerance troubleshooting.
SourceThe badge page documents BAT CON jumper behavior and warns users not to keep the coin cell connected while the badge is plugged into a computer.
SourceNilbinSec lists a protected 18650 battery and lanyard. The listing does not identify capacity, cell make/model, protection circuit, charging method, charger, connector, runtime, electrical limits, safety testing, or replacement procedure.
SourceThe CAD archive records 14500 battery-holder, TP4054-class charging, and MAX17048 fuel-gauge evidence.
SourceThe hardware README documents AA battery power through a boost converter, USB-C power through a regulator, and a switch between USB and battery power.
SourceThe BOM lists a CR2032 battery holder and ALPS power switch, and the schematic links the battery holder through the switch into the 3V3 path.
SourceThe BOM lists a CR2032 battery holder and DPDT slide switch for the badge's portable power/control hardware.
SourceThe BOM lists a CR2032 battery holder and the Eagle schematic carries BT1 as a CR2032 holder tied into the badge power rails.
SourceThe board archive and README point to power and MAX17048 schematic material, with dual 14500 battery-holder and fuel-gauge evidence preserved in the CAD tree.
SourceThe CC13 KiCad comments identify LiPo charging, dual 14500 battery holders, and fuel-gauge hardware.
SourceESPlant included a 16340 lithium-cell holder, solar-input-friendly charger interface, and automatic switching between solar input, battery, and USB power.
SourceThe README and firmware document a pushbutton that toggles microphone power and clears the display for standby/low-power behavior.
SourceThe official badge announcement lists interactive power management and a 12 V 1.5 A power supply, without documenting the underlying design, safety limits, or supported external equipment.
SourceHackaday describes an 18650 cell and charging circuit as part of the badge hardware package.
SourceThe hardware trail documents lithium-polymer battery power and MCP73831-based charging for portable badge use.
SourceThe maker lists an included 2,000 mAh LiPo, BQ24072RGT battery-management controller, TPS63051RMWR 3.3 V buck-boost supply, thermal monitoring, and up-to-1.5 A fast-charging support. The public listing does not include a battery specification, charger settings, measurements, operating guide, or independent safety verification.
SourceThe README documents Li-ion battery or USB power and USB charging when the power switch is on.
SourceThe SAO spec states that the badge is powered by two AA batteries and that USB-C power-bank operation keeps the badge continuously on.
SourceThe README lists a two-AAA battery holder as the badge power hardware.
SourceThe maker says buyers may select DEF CON pickup this year or shipment by early August, with pickup location/time to follow. The source does not establish a final pickup schedule, venue authorization, customer notice, shipment posting, customs handling, delivery receipt, replacement policy, or a completed handoff.
SourceThe live listing shows $10, six sold, 44 remaining, on-site-only DEF CON 34 pickup, and tentative Friday/Saturday BadgeLife Village times. These seller statements do not prove final inventory, paid orders, actual schedule, pickup, delivery, refund, support, or venue authorization.
SourceThe live listing shows $20, 20 sold, ten remaining, a free Saturday DEF CON 34 BadgeLife Village pickup label, and pickup wording for DEF CON 34 or BSidesLV. These seller statements do not prove final inventory, payment, schedule, handoff, shipping, refund, or event authorization.
SourceThe live page shows $20, eight sold, 92 remaining, DEF CON 34 BadgeLife Village, LineCon, and Queercon Mixer drop labels, plus post-DEF-CON CONUS shipping. These seller-published terms do not prove final run size, paid orders, onsite allocation, pickup, shipment, delivery, refund, replacement, or event authorization.
SourceThe official checkout lists $20 including tax and says all online stock allocations are exhausted. The Puzzled Hackers Team says paid sales were capped at a break-even point. Neither source publishes a unit count, payment ledger, production total, in-person stock, completed sale, delivery, refund, replacement, or post-event availability result.
SourceThe live product page lists $24 and a seller state of 19 sold from a listed total of 23, plus two stated DEF CON 34 Badge Life Booth pickup times. It says a missed drop can be mailed or refunded. These seller-published terms do not prove final inventory, payment, pickup, shipment, delivery, refund, venue authorization, or event outcome.
SourceThe live Lepi Labs product page shows a $25 price, 25 sold, zero remaining, and a DEF CON 34 drop label. The team separately announces scheduled BadgeLife Village drops. These time-specific states do not prove final run size, paid-order ledger, physical stock, exact drop allocation, handoff, delivery, or post-event outcome.
SourceThe live Lepi Labs product page shows a $35 price, seven sold, zero remaining, and a DEF CON 34 drop label. The team separately announces scheduled BadgeLife Village drops. These current source statements do not establish final run size, paid-order status, physical stock, exact drop allocation, handoff, delivery, refund, or post-event outcome.
SourceThe live Lepi Labs product page shows a $45 price, 11 sold, zero remaining, and a DEF CON 34 drop label. The team separately announces scheduled BadgeLife Village drops. These time-specific source states do not prove the final run size, paid-order ledger, physical stock, timing, handoff, delivery, refund, or post-event outcome.
SourceThe observed live product payload reports $45, 150 total units, 28 sold, 122 remaining, `presale: true`, no shipping options, and two announced DEF CON 34 BadgeLife Village pickups: Friday August 7 at 1 PM and Saturday August 8 at 1 PM. This is a time-specific maker marketplace snapshot, not proof of paid-order count, completed manufacture, venue authorization, onsite inventory, pickup, delivery, refund, support, or final availability.
SourceThe live MakeItHackin page lists $50 and a seller state of 15 sold from a listed total of 100, plus drops labelled BSides Las Vegas 2026 and two Linq Circle Bar nights. These time-specific seller figures do not prove final run size, paid-order ledger, onsite allocation, collection, shipment, delivery, refund, event authorization, or post-event support.
SourceThe live listing shows $50, 43 sold, 57 remaining, and a DEFCON34 drop label. The repository and project diary describe online sale and intended August handout/pickup. These sources do not prove final run size, paid-order ledger, exact drop allocation, production, attendee handoff, shipment, delivery, refund, or post-event support.
SourceThe live product payload reports a $120 100-unit presale with 41 sold, a DEF CON 34 pickup option, and a seller-published $140 at-con plan. This is a time-specific maker marketplace snapshot, not proof of final production, paid orders, finished units, onsite inventory, booth authorization, pickup, shipment, delivery, donation, refund, or customer support outcome.
SourceThe live product payload identifies a $55, 125-total pre-sale for DEF CON 34, currently reports 125 sold and zero remaining, lists no shipping options, and directs collection to the Darknet-NG contest booth. This preserves a time-specific maker marketplace state, not evidence that the total run is manufactured, paid, assembled, collected, delivered, or supported after the event.
SourceRed Team Village's public DC34 Badgelife response labels RTV D20 as a new badge, says it will be available on site at DEF CON through RTV, and gives an $80 price. The statement does not prove inventory, payment, manufacture, final price, sale location/time, venue authorization, pickup, recipient allocation, refund, support, or a completed handoff.
SourceThe maker page says preorders are sold out and may have a few extras to trade in person. The current payload marks its $65 base, $150 Laser* Tag bundle, and $80 voluntary-extra-payment options unavailable. This is a current storefront snapshot, not proof of a sale count, physical inventory, finished build, payment, trade, pickup, delivery, refund, or post-event support outcome.
SourceThe maker says about 55 badges had been made with roughly ten boards left, a few may be given to the first roughly five signal-intel puzzle solvers, most or all RGB units are accounted for, a few non-RGB units may be sold at cost, and some RGB blank boards may be given away. These comments do not establish a production ledger, final build count, exact price, payment, eligibility, pickup site/time, receipt, donation, assembly, delivery, support, or post-event outcome.
SourceThe official current inventory endpoint lists 86 $120 Standard, 25 $130 Pro, and five $140 RAD first-run units—152 total—all with zero current availability. The shop says the first run is gone and all 152 shipped, while the present form only gauges interest in a possible second run. This is a current storefront snapshot, not a production audit, proof that every buyer received a unit, or a second-run promise.
Source