DEF CON Singapore 2026 · Singapore · 2026

DEF CON Singapore 2026 TISC ESP32 Trinket

CSIT C517 finalist BLE mesh challenge hardware

A source-backed TISC@DEF CON SG finals challenge artifact: CSIT's official C517 page documents the on-site TISC finals, and a finalist writeup says each of the top-50 finalists received an ESP32 hardware trinket running a customized BLE mesh chat protocol to reverse engineer.

DEF CON Singapore C517 Village CSIT TISC Singapore ESP32 BLE Mesh CTF Reverse Engineering Challenge Hardware Southeast Asia Asia

EventDEF CON Singapore 2026

SeriesDEF CON Singapore

LocationMarina Bay Sands, Singapore

CountrySingapore

People

Authors & Credits

C517 Village and TISC publisher

CSIT

Official publisher of the C517 Village and TISC@DEF CON SG online-qualifier/on-site-finals source trail.

Source

TISC finalist writeup author

U-Zyn Chua

Published the first-hand finalist writeup documenting the ESP32 BLE mesh trinket challenge and finalist distribution scope.

Source

host event

DEF CON Singapore

Official host-event source for the DEF CON Singapore context; not used as proof of official admission-badge status for the TISC trinket.

Source

Why It Mattered

It closes the C517/TISC source trail called out in the Asia monitoring notes while keeping scope tight: this was a finalist challenge device inside DEF CON Singapore's C517 Village, not an all-attendee or official DEF CON admission badge.

Hardware

The recovered artifact evidence identifies an ESP32 hardware trinket. The public source trail does not publish a schematic, PCB files, BOM, exact ESP32 module variant, battery, enclosure detail, or production archive.

Software & Apps

The finalist writeup says the trinket ran a customized mesh chat protocol over BLE and that the challenge goal was to reverse engineer it to gain unauthorized access to an administrative system broadcasting over that protocol. No firmware repository, protocol spec, binary, or challenge source has been recovered.

Lore

U-Zyn Chua's finalist report says the online qualifier ran March 27-29, 2026, the top 50 qualified for the on-site finals at DEF CON Singapore, and finalists had six hours to solve five challenges. CSIT's C517 page frames TISC@DEF CON SG as a special edition of its annual CTF with online qualifiers and on-site finals.

Lifecycle

Add-ons & Upgrades

challenge hardware first-hand finalist-backed

ESP32 finalist trinket

The finalist writeup says each TISC@DEF CON SG finals participant was handed an ESP32 hardware trinket for one of the on-site challenges.

Compatibility: DEF CON Singapore 2026 TISC ESP32 Trinket

Source

distribution scope source-backed

Top-50 on-site finals context

CSIT documents TISC@DEF CON SG as an online qualifier followed by on-site finals, while the finalist writeup says the top 50 finalists qualified and had six hours for five challenges.

Compatibility: DEF CON Singapore 2026 TISC ESP32 Trinket

Source

wireless challenge first-hand finalist-backed

BLE mesh chat protocol

The trinket ran a customized mesh chat protocol over BLE, with the challenge requiring reverse engineering to gain access to an administrative system broadcasting over the protocol.

Compatibility: DEF CON Singapore 2026 TISC ESP32 Trinket

Source

Operational history

Issues & Camp Impact

challenge-artifact classification note

The ESP32 trinket is documented as a TISC finals challenge device handed to finalists, not as an all-attendee DEF CON Singapore badge or universal conference credential.

The catalogue includes it as a source-backed C517 Village challenge artifact while avoiding an official admission-badge claim.

Confidence: official C517 source plus first-hand finalist writeup
Status: documented
Timeframe: DEF CON Singapore 2026
Source note: CSIT C517 Village page, U-Zyn Chua finalist writeup, and DEF CON Singapore event page.

hardware and firmware archive gap note

The public source trail identifies ESP32 hardware and BLE mesh behavior but does not publish schematic, PCB files, BOM, firmware, binaries, protocol documentation, exact module variant, or production files.

Hardware and software claims stay limited to the finalist writeup's challenge description.

Confidence: first-hand finalist source but incomplete technical archive
Status: needs public challenge archive
Timeframe: post-event source pass
Source note: U-Zyn Chua TISC@DEFCON Singapore 2026 Finals writeup.

missing rights-cleared image note

No TISC trinket image is published because the finalist writeup's useful photo does not provide an explicit reusable image license, attribution basis, and processing provenance for badge.gallery publication.

The Singapore C517 record remains source-backed and image-free rather than copying an article photo, screenshot, or generated substitute.

Confidence: local project policy
Status: needs licensed original replacement
Timeframe: current catalogue build
Source note: badge.gallery image policy and U-Zyn Chua finalist writeup.

Resources

C517 Village at DEF CON SG official village page · CSIT official C517 Village page documenting TISC@DEF CON SG as a special-edition Capture The Flag with online qualifiers and on-site finals at DEF CON Singapore. DEF CON Singapore 2026 event page event page · Official DEF CON page anchoring the April 28-30, 2026 Singapore host event; it does not classify the TISC trinket as an official admission badge. TISC@DEFCON Singapore 2026 Finals writeup finalist writeup · Finalist report documenting top-50 qualification, six-hour finals format, and the ESP32 BLE mesh challenge trinket handed to each participant.

Sources

CSIT: C517 Village at DEF CON SG Retrieved 2026-05-15 · Official C517 Village source for TISC@DEF CON SG, online qualifier and on-site final structure, C517 Village context, and CSIT framing. DEF CON: DEF CON Singapore Retrieved 2026-05-15 · Official host-event source for the April 28-30, 2026 DEF CON Singapore conference at Marina Bay Sands; this source does not identify the TISC trinket as an official admission badge. U-Zyn Chua: TISC@DEFCON Singapore 2026 Finals Retrieved 2026-05-15 · First-hand finalist source for the top-50 finalist group, six-hour five-challenge finals, and ESP32 BLE mesh hardware trinket handed to each participant.