Issue dossier
A linkable camp-impact record with badge context, severity, evidence confidence, and source notes.
The catalogue records the verified firmware and challenge surface without inventing physical-form-factor, power, or hardware-design details.
Evidence
Repository license source confirming GPL-2.0 terms for the badge firmware.
Official BSides Des Moines source for the June 13, 2026 edition in Ankeny, Iowa, United States.
iot-pwn repository for the BSides Des Moines 2026 badge firmware, published under GPL-2.0, documenting the CH585 RISC-V NFC badge, the flash station provisioning tooling, and the three-layer CTF.
Source trail
Primary official source for the June 13, 2026 Ankeny, Iowa edition and United States Security BSides context.
Primary repository source for the WCH CH585 RISC-V microcontroller with integrated ISO 14443A NFC reader, four SK6812 RGBW LEDs, main and boot buttons, audio tone generator, USB-CDC console, the eight-tag village-collection CTF, two static flags, the hash unlock, and the BOOTSEL bootloader backdoor, published under GPL-2.0.
Primary license source confirming GPL-2.0 terms for the badge firmware.