Payment Village at DEF CON 33 · United States · 2025
Large physical ATM attack-surface simulation artifact
A preserved DEF CON 33 programme describes Payment Village's Vulnerable ATM Badge as the conference's largest badge that year: a physical form factor attendees could carry with two hands, built to simulate ATM attack surfaces. Payment Village's own DEF CON 33 page confirms the village/event context, while its 2026 schedule still lists an Introduction to the Vulnerable ATM Badge. The recovered sources establish the named physical educational artifact, not its electronics, a reusable current build, or a 2026 reissue.
People
Payment Village's own historical and current event pages establish its DEF CON 33 and DEF CON 34 programme context. This source credit does not identify an individual badge designer, fabricator, hardware author, safety reviewer, or image-rights holder.
SourceIt adds an unusually large DEF CON village badge without collapsing a high-level programme description into a technical teardown or access-control claim. The record preserves the 2025 object and its current teaching continuity while keeping the unverified relationship to later Payment Village programming explicit.
The archived programme calls it the largest badge at DEF CON 33 and says it simulates ATM attack surfaces in a physical form factor that can be carried with two hands. It does not identify a PCB, electronics, controller, display, lights, readers, card interfaces, operating system, enclosure material, dimensions, weight, power source, internal mechanisms, production quantity, manufacturer, final revision, or an individual artifact handoff. The term badge alone is not treated as proof of an electronic badge or a conference-admission credential.
No Vulnerable ATM Badge firmware, image, source code, application, challenge implementation, virtual-machine image, hardware interface, protocol, installation guide, exploit path, or software license was recovered. The 2026 schedule's Introduction to the Vulnerable ATM Badge talk confirms a public teaching reference, not a released or reusable 2025 software stack.
Payment Village appeared at DEF CON 33 at the Las Vegas Convention Center in August 2025. The preserved programme places the Vulnerable ATM Badge among the village's hands-on experiences and describes a payment-security education aim. Payment Village's current DEF CON 34 programme schedules an Introduction to the Vulnerable ATM Badge on Friday and Saturday, but it neither says a new badge will be issued nor connects that historical project to the separate 2026 volunteer village-badge access notice.
Source-backed hardware metadata
Structured technical signals seeded from public badge documentation, repositories, schematics, firmware notes, or event evidence. These fields are designed for filtering, API use, repair planning, preservation, and future Companion Gear matching.
The preserved DEF CON 33 programme calls Payment Village's Vulnerable ATM Badge a large physical badge that simulates ATM attack surfaces; it does not document electronics, a technical stack, allocation, or credential behavior.
Signal sourceLifecycle
Payment Village's official 2026 programme schedules Introduction to the Vulnerable ATM Badge on Friday and Saturday. This identifies an ongoing instructional reference only; it does not state that the 2025 object will be issued again, demonstrate its final 2025 configuration, or connect it to a 2026 volunteer credential.
SourceThe preserved DEF CON 33 programme calls the Vulnerable ATM Badge the largest badge at the conference that year and says it simulates ATM attack surfaces in a physical form factor that can be carried with two hands. It does not provide an operating procedure, board or module inventory, safety assessment, or proof of a final attendee-owned unit.
SourceOperational history
The record does not describe the item as an attendee entitlement, a DEF CON-issued Human badge, a volunteer badge, a personal device, or a completed distribution run.
The catalogue records the real high-level artifact without publishing operational payment-security instructions or turning programme language into a technical teardown, safety assessment, or reproducible design.
The catalogue preserves cross-year educational continuity without inventing a 2026 hardware revision, reissue, allocation, or relationship among distinct Payment Village artifacts.
The United States record remains source-backed and image-free rather than copying source-page media, documentation screenshots, event photos, social media, placeholders, or generated approximations.