Bug Bounty Village at DEF CON 33 · United States · 2025

Bug Bounty Village DC33 BBV Badge

Four-button, four-LED challenge badge

Bug Bounty Village's BBV Badge 2025 was a DEF CON 33 village challenge badge with four buttons, four corresponding LEDs, and a reward path for attendees who lit all four LEDs.

Bug Bounty Village DEF CON United States Challenge Badge Buttons LEDs CTF.ae HackerOne Intigriti Zoom North America

EventBug Bounty Village at DEF CON 33

SeriesBug Bounty Village

LocationLas Vegas Convention Center, Las Vegas, Nevada

CountryUnited States

People

Authors & Credits

badge and challenge publisher

Bug Bounty Village

Official publisher of the BBV Badge 2025 page, challenge flow, volunteer reward handoff, and CTF page used for this record.

Source

badge challenge and CTF sponsor

CTF.ae

The official badge page lists CTF.ae as the Capture the Flag leg, and the CTF page documents the CTF.ae event context.

Source

badge challenge sponsor

HackerOne

The official badge page identifies HackerOne as one of the challenge sponsors whose coin leg produced a binary flag for the badge.

Source

badge challenge sponsor

Intigriti

The official badge page identifies Intigriti as one of the challenge sponsors whose coin leg produced a binary flag for the badge.

Source

badge challenge sponsor

Zoom

The official badge page identifies Zoom as one of the challenge sponsors whose leg produced a binary flag for the badge.

Source

Why It Mattered

It captures another DEF CON village badge line where the badge acted as a cross-village game surface: sponsor challenges produced binary flags that could be entered into the badge, while direct hardware hacking was explicitly acknowledged as a valid path to the same visible LED goal.

Hardware

The official BBV Badge 2025 page documents a badge with four buttons and four corresponding LEDs. Public sources reviewed in this pass do not identify the microcontroller, PCB stack, power source, firmware language, schematic, or production files, so this record does not invent those details.

Software & Apps

The documented interaction model uses four binary flags from the Zoom Challenge, Intigriti Challenge Coin, HackerOne Challenge Coin, and CTF.ae Capture the Flag. The official page says those flags could be input into the badge; it also notes that hacking the hardware to turn on all LEDs would probably deserve the same swag reward. No public firmware or source repository was identified in this pass.

Lore

The badge page frames the artifact as a Bug Bounty Village reward loop: solve the four linked challenges, light the LEDs, bring the badge to village volunteers, and receive swag. The CTF page places the CTF.ae leg in Bug Bounty Village room W326 at the Las Vegas Convention Center with in-person and remote participation.

Lifecycle

Add-ons & Upgrades

CTF leg historical

CTF.ae onsite and remote leg

The CTF page places the CTF.ae challenge leg online and onsite at the Bug Bounty Village in LVCC room W326, running from August 8 to August 10, 2025.

Compatibility: Bug Bounty Village DC33 BBV Badge

Source

badge interaction surface source-backed

Four-button LED challenge interface

The official badge page says the BBV Badge 2025 has four buttons with four corresponding LEDs, and the visible goal is to light all four LEDs.

Compatibility: Bug Bounty Village DC33 BBV Badge

Source

event challenge documented

Sponsor challenge flag entry

Zoom, Intigriti, HackerOne, and CTF.ae challenge legs each produced binary flags that could be entered into the badge.

Compatibility: Bug Bounty Village DC33 BBV Badge

Source

hardware hack acknowledged

Hardware-hacking LED bypass path

The official page explicitly notes that hacking the hardware to turn all LEDs on would probably also deserve the cool swag.

Compatibility: Bug Bounty Village DC33 BBV Badge

Source

Operational history

Issues & Camp Impact

hardware-detail caveat note

The official page proves four buttons, four LEDs, challenge flags, and hardware-hacking acknowledgement, but it does not publish component identifiers, schematic, firmware, PCB files, battery details, or production notes.

The catalogue records only the verified badge behavior and avoids inventing electronics beyond the public BBV Badge 2025 source.

Confidence: source-backed but incomplete
Status: needs schematic or firmware recovery
Timeframe: current BBV pass
Source note: Bug Bounty Village BBV Badge 2025 page.

missing rights-cleared image note

No BBV Badge 2025 image is published because the official Wix page and recovered public media have not been paired with complete reuse rights, attribution, and processing notes for catalogue publication.

The record remains source-backed and image-free rather than copying official site media, screenshots, social posts, or generated imagery.

Confidence: local project policy
Status: needs licensed original replacement
Timeframe: current catalogue build
Source note: badge.gallery image policy and Bug Bounty Village BBV Badge 2025 page.

source-depth caveat note

This pass found official BBV page evidence for the badge and CTF leg but no public repository, bill of materials, final challenge writeup, or rights-cleared documentary badge photo.

The record is intentionally compact and should be revisited if Bug Bounty Village publishes post-event technical material.

Confidence: primary source only
Status: monitor for later releases
Timeframe: current BBV pass
Source note: Bug Bounty Village BBV Badge 2025 and CTF 2025 pages.

Resources

BBV Badge 2025 badge page · Official badge page documenting four buttons, four LEDs, sponsor challenge legs, binary flag entry, hardware-hacking acknowledgement, volunteer reward flow, and Discord support path. Bug Bounty Village CTF 2025 CTF page · Official CTF page documenting the CTF.ae leg, August 8-10, 2025 timing, remote and onsite participation, and Bug Bounty Village room W326 at LVCC. Bug Bounty Village home village page · Official village source for the Bug Bounty Village site, DEF CON 33 navigation, and DEF CON 34 continuity context.

Sources

Bug Bounty Village: Home Retrieved 2026-05-15 · Official village site source for Bug Bounty Village, DEF CON 33 navigation, and Las Vegas Convention Center continuity context. Bug Bounty Village: BBV Badge 2025 Retrieved 2026-05-15 · Primary badge source proving the BBV Badge 2025 page, four buttons with corresponding LEDs, four sponsor challenge legs, binary flag entry, all-LED reward flow, hardware-hacking acknowledgement, and volunteer reward handoff. Bug Bounty Village: CTF - Full Event Overview Retrieved 2026-05-15 · Primary CTF context source for the CTF.ae challenge leg, Friday August 8 through Sunday August 10, 2025 timing, remote and onsite participation, and room W326 at the Las Vegas Convention Center.