Country dossier
Worldwide badge coverage for Spain, grouped into seeded badges, event editions, add-ons, operational issues, resources, and evidence sources.
Seeded artifacts
Limited electronic badge for r2con speakers and friends
A limited electronic badge made for r2con 2017 speakers and friends in Barcelona, documented by the official badge-manufacturing talk and first-hand reporting that says it showed project-status information such as build state, last commit, and GitHub stars.
Planned app-issued venue-access identity artifact
Barcelona Cybersecurity Congress 2026's official app page tells visitors to download the official app and secure a digital badge, calling it the essential key for venue access. The same page says the app will be available in September 2026, before the November 3-5 Barcelona event. This record models a planned app-issued access identity artifact only; it does not infer a physical badge, a PCB, a ticket entitlement, an account or credential format, or a final access workflow.
Planned printable networking identity artifact
Barcelona Cybersecurity Congress 2026's official app page says that, with the event digital badge, visitors can print a Networking Badge to facilitate connections with fellow attendees. It names the registration desk and the Hall 2.1 info point as print locations. This record captures that planned printable networking artifact without assuming its physical medium, design, personal-data fields, access rights, or relationship to the separate digital venue-access badge.
Source-backed RGB LED-matrix event badge
SEIF-UAM's public C1B3RTR4CKS 2026 badge repository documents an event badge with a CH32V003 RISC-V microcontroller, 8×16 RGB LED matrix, five-button control surface, public C firmware, games, and a personal-name marquee. The official event site and a contemporaneous attendee report place the physical artifact at the completed May 29 Madrid event; final allocation and production details are not public.
Madrid Hackplayers electronic development-board CTF badge
A source-backed Spanish hacker-conference electronic badge record: the official h-c0n post says Hackplayers finally produced an electronic badge for the sixth 2026 edition, describes it as a fully functional development board, and ties pickup to the February 6 conference registration and CTF start; the public `therealdreg/hcon2026hwctf` repository and Hackplayers post-event write-up document RP2350/RISC-V firmware, tooling, named co-creators, and winner write-ups.
Spanish ESP32 PACMAN CTF badge with project-builder and community-reversal evidence
RootedCON 2026's PACMAN-themed attendee CTF badge is documented by both community reversals and a first-hand TechFrontiers project-builder write-up. David Melendez Cano reports original colored Ghost boards that attendees could choose, an ESP32-WROOM-32 platform, ESP-NOW game-server interaction, per-badge NVS identity/key material, and digitally signed questions and answers. Community reversals independently identify an ESP32-D0WD-V3, 1.77-inch ST7735 128x160 display, directional controls, and native quiz-server CTF protocol for the March 5-7 sixteenth edition at Kinepolis Madrid.
Events
The September 6-9, 2017 radare2 reverse-engineering congress in Barcelona, whose official schedule included NighterMan's r2con badge manufacturing talk and whose attendee reporting documents a limited speaker/friends electronic badge.
The planned November 3-5, 2026 Barcelona Cybersecurity Congress edition. Its official app page says visitors secure a digital badge in the app as the key for venue access and can print a Networking Badge at registration or the Hall 2.1 info point. Current official material does not describe the credentials' implementation, final printed form, hardware, or reusable image rights.
The completed May 29, 2026 fifth C1B3RTR4CKS cybersecurity and cyberintelligence event at Universidad Autónoma de Madrid. The organizer-linked SEIF-UAM repository identifies the C1B3RTR4CKS 2026 badge and public event firmware, while a contemporaneous attendee report describes the physical LED-matrix badge credential. Public sources do not establish a recipient ledger, final board revision, production archive, or reusable image rights.
The February 5-7, 2026 Hackplayers h-c0n edition in Madrid, with workshops at Exe Madrid Norte and talks at Centro Cultural Sanchinarro, whose official post announced the CTF BADge electronic development-board challenge.
The March 5-7, 2026 sixteenth RootedCON edition in Madrid whose direct TechFrontiers project-builder account and community reversing repositories document a PACMAN Ghost ESP32 attendee badge with display, directional controls, ESP-NOW CTF interaction, and a native quiz-server protocol.
Lifecycle
The first-hand writeup says the badge indicated information such as build status, last commit, and GitHub stars.
The original PACMAN-themed badge firmware's native quiz-server CTF protocol was reversed by the community. The community repository is not an official RootedCON release.
The official h-c0n badge post says the CTF BADge is a fully functional development board that can be used for personal projects, not only an ornament.
The r4venOS community firmware replaces the Pacman firmware with a WiFi scanner, evil-twin detector, deauth, and crypto utility toolkit on the same ESP32 hardware.
Community reversals identify a 1.77-inch ST7735 128x160 TFT display and a directional pad with additional buttons on the ESP32-D0WD-V3 board.
The public event guide describes an 8×16 RGB LED matrix and five physical buttons on the wearable game-console badge, while the event source targets a CH32V003 board.
The builder describes ESP-NOW question distribution, Ed25519 verification before display, and individual badge-signed replies to the game server. This preserves the source-described event architecture without publishing packet construction, key-recovery steps, backend endpoints, final protocol source, cryptographic review, or a general security guarantee.
The TechFrontiers builder account says attendees could choose red, purple, green, or blue Ghost boards, while PACMAN boards were reserved for the organization. It does not establish quantities, exact recipient ledger, final color inventory, or every physical-board variant.
The official post says participants could start the CTF when registration opened on February 6, 2026 at 16:45, with the competition ending on February 13 at 17:00 or when three participants solved every flag.
SEIF-UAM publishes C and PlatformIO source for the event badge's menu and compact game collection. The catalogue links the source but does not reproduce build, flashing, game-control, or hidden-feature instructions.
The official r2con schedule included NighterMan's badge talk covering prototyping, design, debugging, assembly, encountered problems, manufacturing, and tools.
The public hcon2026hwctf repository provides ctf.uf2 and describes RP2350/RISC-V Hazard3 exploitation challenges for the HC0N 2026 hardware CTF.
The recovered first-hand report describes the badge as fancy hardware for speakers and friends, so the record does not claim general attendee distribution.
The event guide documents a personal-name editor and scrolling marquee as attendee-facing firmware features; it does not establish whether all handed-out badges shared the same final configuration.
The official app page says the app will be available in September 2026 and describes programme, exhibitor, session-feedback, networking, and practical-information functions.
The official app page says visitors secure a digital badge by downloading the app and calls that badge the essential key for venue access.
The official page names the registration desk and the info point in Hall 2.1 as the places to print the Networking Badge.
The official app page says visitors can print a Networking Badge with their digital badge to facilitate connections with fellow attendees.
The Hackplayers recap links the first three winner write-ups and summarizes their approaches: firmware extraction, RISC-V reversing, logical-flaw exploitation, static and dynamic analysis, validation weaknesses, and state manipulation.
The repository preserves first, second, and third winner write-ups plus serial, picotool, BOOTSEL, and debugging guidance for people replaying the hardware CTF.
The builder describes LiPo 1S, integrated charging, under-voltage lockout, automatic USB-serial RESET/EN control, exposed UART0, and an extra screen-ground MOSFET on some boards. The account does not establish cell capacity, charge settings, board-revision coverage, electrical testing, safe modification, or a production-service procedure.
Operational history
The dossier documents a real badge at the event without turning an attendee observation into an unsupported universal issuance or credential-system claim.
Public code remains an important preservation resource without being presented as a verified reproduction image or complete challenge solution set.
The public source is linked for evidence, but no repository attachment, official-page image, or social-media image is copied into the catalogue and the badge remains image-free.
The record stays precise about the documented interface while avoiding claims that the current source tree exactly describes each physical unit.
Hardware and software descriptions stay limited to what the sources explicitly support.
The dossier does not convert the access statement into a claim about a particular technology, secure-design property, personal-data practice, mobile-platform compatibility, or physical/electronic badge hardware.
The compendium models the object as a limited conference artifact instead of an all-attendee badge.
The Spain record remains source-backed and image-free rather than copying source-page media, documentation screenshots, event photos, social media, placeholders, or generated approximations.
The Spanish h-c0n record remains source-backed and image-free rather than copying blog images, repository photos, prize photos, screenshots, logos, or generated badge art.
The planned Spanish record remains source-backed and image-free rather than copying app-store art, event graphics, page images, screenshots, social-media media, placeholders, or generated approximations.
The planned Spanish record remains source-backed and image-free rather than copying app-store art, event graphics, page images, screenshots, social-media media, placeholders, or generated approximations.
The record remains image-free rather than copying social or attendee imagery without complete reuse provenance.
The Spanish record remains source-backed and image-free rather than copying community repository diagrams, the LinkedIn post image, screenshots, social media, placeholders, or generated approximations.
The catalogue records only the official development-board, Hackplayers recap, and repository-backed RP2350/RISC-V challenge claims while withholding exact board-design and manufacturing claims.
The catalogue retains a precise planned access-artifact statement without presenting conflicting event-app copy as a delivered credential, universal entitlement, or verified access outcome.
The catalogue records a concrete proposed print path without presenting conflicting event-app copy as a universal attendee benefit, an issued physical artifact, or a verified onsite workflow.
The dossier does not turn a networking purpose into a claim about badge technology, identity verification, data handling, contact exchange, physical construction, or permission to access the venue.
The catalogue now records direct builder attribution and event architecture without portraying a personal project post or community reverse-engineering tree as an official RootedCON source release, complete production specification, firmware security audit, or reusable-image permission.
The record distinguishes the conference CTF BADge from compatible at-home replay boards and preserves the hardware-debugging requirement without overstating universal compatibility.