AlfaFilly
The Lepi Labs product page says Canary artwork by AlfaFilly. This records the stated artwork credit only; it is not an image-reuse license or proof of hardware, firmware, manufacturing, or event role.
SourceDEF CON 34 · United States · 2026
Volatile Organic Canary SAO (DEF CON 34)
Sold-out pre-event Lepi Labs novelty VOC-indicator Simple Add-On for DEF CON 34
Lepi Labs' own Uberflux listing identifies the Volatile Organic Canary as a DEF CON 34-drop Simple Add-On. Its August 4, 2026 marketplace state is out of stock, with 11 sold, zero remaining, and a $45 listed price. The product describes an SGP40 VOC sensor plus SHT4x temperature/humidity sensor, a two-character fourteen-segment display, RGB LED, ATtiny1616-S controller, UPDI reprogramming, SAO or included CR2032 power, and a lanyard clip. Its maker explicitly says the device is novelty-only and must not be relied on for accurate air-quality measurements; it also records a ten-minute VOC-index warmup and a v1.0 board-order/remediation plan. Lepi Labs' first-hand DC34 announcement corroborates planned Friday and Saturday BadgeLife Village drops. This is a source-backed pre-event independent sensor SAO, not proof of final manufactured hardware, sold orders, safe or accurate air-quality measurement, delivery, host compatibility, DEF CON organizer affiliation, conference admission, or reusable-image rights.
EventDEF CON 34
SeriesDEF CON
LocationLVCC West Hall, Las Vegas, Nevada
CountryUnited States
People
Authors & Credits
Lepi Labs
The live Uberflux listing identifies Lepi Labs as the maker, and the first-hand announcement speaks as the group. This records its public maker/publisher role without inferring individual engineering authorship, production responsibility, DEF CON organizational status, or image-reuse authority.
SourceWhy It Mattered
This is unusually explicit current maker evidence for a sensor-bearing SAO, including an essential non-medical/non-safety accuracy boundary that catalogues often lose when repeating product copy. The record preserves its distinct display, sensor, firmware, battery, and I2C-isolation claims while keeping the practical limits visible: a playful VOC indication is not an air-quality instrument, a current sold-out counter is not a fulfillment ledger, and marketplace art is not a cleared documentary image.
Hardware
The maker lists an SGP40 I2C VOC sensor and SHT4x I2C temperature/humidity sensor, a two-character fourteen-segment display controlled by shift registers, RGB LED, ATtiny1616-S MCU, SAO-connector power or an included CR2032 battery, and a lanyard clip. It says v1.0 disconnects hardware I2C from the SAO connector and uses separate connector lines to reduce sensor-bus collisions. No reviewed source identifies sensor calibration or placement, component variants beyond the named families, display/LED part numbers, battery holder/protection, electrical limits, power budget, mechanical dimensions, schematic, BOM, PCB/Gerbers, final v1.0 test data, connector/pinout, supported host matrix, safety certification, or a universal compatibility guarantee.
Software & Apps
The listing says the sensor can show a raw reading or a VOC-index algorithm reflecting relative changes, and says the RGB LED is driven with timers rather than hardware PWM. It also says the ATtiny is reprogrammable through a separately obtained UPDI adapter. No reviewed source publishes the installed firmware, source tree, binary, VOC algorithm version or configuration, sensor library/dependency list, build or flash instructions, update/recovery path, software license, test data, or final behavior of its listed modes.
Lore
Lepi Labs presents the canary as a playful soldering-skills-village companion rather than a protective device. Its DC34 announcement says the group planned scheduled BadgeLife Village drops at Friday 12:30 PM and Saturday 2:30 PM, while the product page names DEF CON 34 drops and says v1.0 boards were ordered. The maker says that unresolved prototype issues or later pre-event problems could lead to a refund or shipment after DEF CON. Those are planned independent acquisition and remediation terms, not proof of actual drop, stock, shipping, refund, event authorization, DEF CON affiliation, or admission.
Source-backed hardware metadata
Technical Profile
Structured technical signals seeded from public badge documentation, repositories, schematics, firmware notes, or event evidence. These fields are designed for filtering, API use, repair planning, preservation, and future Companion Gear matching.
Firmware
-
Arduino documented
Lepi Labs' public DC34 Canary repository contains a PlatformIO Arduino source tree matching the maker-described Canary components. The product page does not map a branch or build to a delivered unit, and the source is not a supported or safe configuration, update, or operating procedure.
Signal source
Lifecycle
Add-ons & Upgrades
maker-described core hardware and reprogramming surface
official maker product description
ATtiny1616-S display, RGB, and UPDI claim
The listing names an ATtiny1616-S, two-character fourteen-segment display driven through shift registers, RGB LED, timer-based non-hardware-PWM behavior, and reprogramming through a separate UPDI adapter. It does not publish final firmware, exact parts/configuration, code, flashing instructions, electrical design, display/LED behavior contract, or support policy.
Source
maker-described measurement behavior
explicitly non-accuracy-certified novelty use
SGP40 and SHT4x novelty VOC-indication claim
The maker lists SGP40 VOC and SHT4x temperature/humidity sensors, a raw-reading option, and a relative VOC-index algorithm with an approximately ten-minute warmup. It expressly says no accuracy claims are made and the device must not be relied on for accurate air-quality measurements. The source does not publish calibration, environmental test, threshold, exposure, health, safety, or certification evidence.
Source
maker-described power and compatibility surface
v1.0 revision claim
SAO or included CR2032 power and I2C-isolation revision
The maker says the canary can run from the SAO connector or an included CR2032 battery. Its v1.0 note says hardware I2C was disconnected from the SAO connector and separate lines were used to reduce the chance of sensor-bus collisions. It does not identify voltage/current limits, battery runtime, connector pinout, I2C electrical characteristics, multi-device test data, or universal host compatibility.
Source
post-publication hardware and firmware source trail
public untagged repository; event-unit mapping unresolved
Maker-owned KiCad and PlatformIO source archive
Lepi Labs' repository named 5-dc34-canary-badge contains native KiCad board/schematic material and a PlatformIO Arduino source tree with components matching the source-described Canary. The source is useful technical provenance, but no reviewed maker page links it directly to the sold product, and its release page reports no releases. It is not treated as a final v1.0 event firmware, final board revision, calibration record, safe operating guide, or source license.
Source
pre-event availability and acquisition record
maker marketplace currently marks the listing out
$45 11-sold and zero-remaining DEF CON 34 drop snapshot
The live Lepi Labs product page shows a $45 price, 11 sold, zero remaining, and a DEF CON 34 drop label. The team separately announces scheduled BadgeLife Village drops. These time-specific source states do not prove the final run size, paid-order ledger, physical stock, timing, handoff, delivery, refund, or post-event outcome.
Source
pre-event production and remedy plan
maker-published before DEF CON
v1.0 board-order and unresolved-prototype remediation statement
The listing says v1.0 boards were ordered and that if v0.1 issues remain or later problems cannot be resolved before DEF CON, buyers could receive a full refund or have their SAO shipped after the event. This is a contingency statement, not evidence that any issue was resolved, a final revision shipped, a refund occurred, or a delivery obligation was completed.
SourceOperational history
Issues & Camp Impact
VOC measurement, air-quality, and safety boundary
note
The maker expressly says no claims are made to this device's accuracy and that it must not be relied on for accurate air-quality measurements. It also frames its VOC-index behavior as relative change after warmup. The source does not publish calibration, environmental or chemical cross-sensitivity testing, threshold or exposure guidance, health recommendations, alarm validation, sensor maintenance, certification, or suitability for safety decisions.
The entry does not treat a playful indication or a sensor part number as an air-quality monitor, medical/safety device, exposure warning, or replacement for appropriate ventilation and professional guidance.
- Confidence
- explicit first-party product disclaimer
- Status
- novelty use only; no accuracy claim
- Timeframe
- 2026 pre-event source pass
- Source note
- Volatile Organic Canary SAO product page.
firmware, VOC algorithm, release, and licensing boundary
note
The maker-owned 5-dc34-canary-badge repository contains a PlatformIO Arduino source tree matching the Canary's components and public behavior outline, but reviewed product material does not directly link a commit or branch to the sold SAO. Its public release page reports no releases, and no root license file was recovered. The sources do not establish a final installed firmware, source-to-unit mapping, pinned dependency state, algorithm/library version, calibration state, binary provenance, update/recovery policy, safe operating procedure, or support commitment.
The catalogue can cite the public source archive without presenting it as a finalized event release, validated VOC algorithm, supported update path, secure deployment, operating instruction, or a code/artwork/media reuse grant.
- Confidence
- maker product description, maker-owned source archive, and public release page
- Status
- source tree public; no release, license, or event-unit mapping recovered
- Timeframe
- source refresh reviewed 2026-08-05
- Source note
- Volatile Organic Canary SAO product page; lepi-labs/5-dc34-canary-badge source tree and public releases page.
hardware, battery, SAO, and I2C compatibility gap
note
Lepi Labs' matching public repository now exposes native KiCad board and schematic files alongside the maker's broad sensor, display, MCU, SAO, CR2032, and I2C-isolation statements. Its product page does not link a repository revision to v1.0 or an event unit, and reviewed sources still do not establish a final BOM, fabrication output, battery/power budget, voltage/current limits, pinout, I2C pullup/level details, thermal or runtime data, host matrix, mechanical specification, safety documentation, or final test evidence.
The record can link a source-published design trail while withholding a final physical specification, safe battery-use claim, collision-free bus guarantee, or universal SAO compatibility assertion.
- Confidence
- maker product description plus maker-owned KiCad source
- Status
- source schematic/PCB public; final unit and host testing unresolved
- Timeframe
- source refresh reviewed 2026-08-05
- Source note
- Volatile Organic Canary SAO product page and lepi-labs/5-dc34-canary-badge KiCad tree.
independent DEF CON association and credential boundary
note
Lepi Labs identifies a DEF CON 34 drop and BadgeLife Village plans but does not say the canary is issued by DEF CON, included with registration, grants admission, replaces a Human badge, has organizer endorsement, or has confirmed venue authorization.
The catalogue classifies the canary as an independent pre-event BadgeLife artifact associated with DEF CON 34, not an official credential, organizer-issued badge, or access item.
- Confidence
- maker product and announcement
- Status
- independent Lepi Labs SAO with a planned DC34 drop
- Timeframe
- 2026 pre-event source pass
- Source note
- Volatile Organic Canary SAO product page and Lepi Labs DC34 announcement.
missing rights-cleared image
note
No Volatile Organic Canary SAO image is published because the Lepi Labs product and announcement do not pair a selected factual artifact image with a reusable license or explicit permission basis, attribution, source URL, and processing notes.
The record remains source-backed and image-free rather than copying the maker listing image, rendered revision imagery, Reddit media, screenshots, social posts, placeholders, or generated approximations.
- Confidence
- local project policy
- Status
- needs selected, attributable, cleared original
- Timeframe
- current catalogue build
- Source note
- badge.gallery image policy and reviewed Lepi Labs sources.
pre-event drop, production, remediation, and fulfillment boundary
note
The marketplace is currently out with 11 sold and no remaining units, and Lepi Labs announces scheduled drops. The listing also states a possible pre-event refund or after-event-shipping remedy if prototype issues persist. None of that proves final manufacture, allocated stock, exact drop quantity, payment completion, defect resolution, receipt, refund, shipping, delivery, or support outcome.
The catalogue preserves current offer and remediation language without converting it into a completed DEF CON distribution report.
- Confidence
- first-party product and first-hand maker announcement
- Status
- listing is sold out; event/drop outcome unconfirmed
- Timeframe
- as reviewed 2026-08-04
- Source note
- Volatile Organic Canary SAO product page and Lepi Labs DC34 announcement.
Resources
Lepi Labs DC34 Canary KiCad and PlatformIO source archive
maker-owned hardware and firmware source · Lepi Labs' public repository is named 5-dc34-canary-badge and contains a KiCad board/schematic tree plus a PlatformIO Arduino source tree whose SGP40, SHT4x, ATtiny1616, display, CR2032, SAO, and UPDI references align with the maker's Canary listing. The product page does not directly link the repository, so it is retained as a maker-owned matching source trail rather than proof of final v1.0 or event-unit parity. No root license file was recovered.
Lepi Labs DC34 Canary release history
public release status · Public GitHub release page reviewed on 2026-08-05 reports no releases. It does not identify a production firmware package, an event-unit source mapping, a support process, or a reuse grant.
Three SAOs of ours coming to DC34
first-hand Lepi Labs announcement · First-person Lepi Labs announcement naming the Volatile Organic Canary and its SGP40/display/RGB surface for DEF CON 34, plus planned Friday 12:30 PM and Saturday 2:30 PM BadgeLife Village drops. Reddit media is not a reusable image grant.
Volatile Organic Canary SAO
first-party Lepi Labs product listing · Lepi Labs' live Uberflux page names the DEF CON 34 drop, current $45 / 11-sold / zero-remaining state, sensor/display/controller/power claims, explicit novelty-only accuracy warning, VOC-index warmup statement, v1.0 revision notes, and remedy wording. Its product image has no stated reusable license or explicit permission basis.
Sources
GitHub / Lepi Labs: Lepi Labs DC34 Canary releases
Retrieved 2026-05-15 · Public release page reviewed on 2026-08-05, reporting no releases. This establishes an untagged public source state rather than a production firmware archive or source-to-unit mapping.
Lepi Labs: Three SAOs of ours coming to DC34
Retrieved 2026-05-15 · First-hand maker announcement corroborating the named product, SGP40 VOC-sensor, two-character display, RGB LED, DEF CON 34 association, and scheduled BadgeLife Village drops. It is not a technical release, calibration record, final stock ledger, delivery report, or image license.
Lepi Labs / GitHub: lepi-labs/5-dc34-canary-badge
Retrieved 2026-05-15 · Public maker-owned source archive named for a DC34 Canary. Its KiCad and PlatformIO trees contain components and software-family references matching the first-party Canary listing, but the maker's product and announcement do not directly link a revision to the event artifact. It is source context, not a final firmware, production, delivery, calibration, support, or image-rights record.
Lepi Labs / Uberflux: Volatile Organic Canary SAO
Retrieved 2026-05-15 · Primary live maker marketplace source for the current DEF CON 34 drop, $45 / 11-sold / zero-remaining snapshot, SGP40/SHT4x/display/RGB/ATtiny1616-S/UPDI/SAO-or-CR2032 claims, raw/VOC-index behavior, ten-minute warmup statement, explicit novelty-only non-accuracy warning, I2C-isolation revision, and v1.0 remediation terms. It does not establish final production, fulfillment, certified measurement, host compatibility, or image reuse permission.