Defcon's Latest Badges Feature a Transparent, Open-Source Security Chip

By Kim Zetter | Security | July 31, 2026

In a move to redefine transparency and trust in computing, the legendary hardware hacker Andrew “bunnie” Huang has designed this year's Defcon badges. While these badges maintain the tradition of being electronic marvels, their true value lies in a removable, transparent core module that serves as a standalone, open-source hardware security token.

Beyond the Puzzle: A New Standard for Trust

Historically, Defcon badges have been known as "electronic masterpieces," filled with:

• Intricate cryptographic challenges
• Hidden Easter eggs
• Complex mechanical gear trains
• Deeply embedded puzzles

However, this year, the focus shifts from the external gadgetry to the internal silicon. The heart of the badge is the Baochip-1x, a "mostly" open-source microcontroller developed over three years to ensure that security is verifiable rather than just promised.

The Transparency Architecture

Huang has released the following components on GitHub for public scrutiny:

1. Operating System
2. Firmware
3. Processor Core
4. Cryptographic Engines
5. Input-Output (I/O) System

Traditionally, chips are black boxes opaque components. Even "open source" chips often suffer from a supply-chain gap: the design is open, but the physical chip is encased in plastic, meaning users must trust that no backdoors were added during fabrication.

The Baochip-1x solves this by using a specialized packaging that allows infrared light to penetrate the silicon. This enables researchers to visually inspect the internal structures—including RAM arrays—and verify they match the published blueprints.

"I've been doing a bunch of stuff along the lines of trust and silicon and verification transparency... to try and get a chip that we can trust down to the very core, down to the transistor," Huang explained to WIRED.

---

The Engineering Journey: "Piggybacking" Fabrication

Creating a custom chip is prohibitively expensive, often costing millions. Huang bypassed this hurdle through a strategic partnership with a company called Crossbar.

The Manufacturing Deal

Crossbar wanted a secure, open-source chip but lacked the roadmap. Huang agreed to help on the condition that he could "piggyback" his own design onto their manufacturing run. This allowed both designs to share a single wafer.

Technical Comparison: Baochip vs. Crossbar

While the fabrication process (utilizing TSMC's $22\text{nm}$ process) involves some proprietary elements, Huang asserts that this is far more transparent than any other security-oriented chip currently available.

---

Integration with Defcon's Theme

The decision to use the Baochip-1x for the badges came after a conversation between Huang and Defcon founder Jeff Moss. The chip's philosophy aligned perfectly with this year's theme: Agency.

• Definition of Agency: The technologies and choices that enhance an individual's self-determination.
• The Goal: To move away from "trusting" a vendor and toward "verifying" the hardware.

Distribution and Legacy

Previously, the Baochip existed only in limited development releases. This year marks its first major deployment, with 27,000 units distributed via the badges. Huang's intent is for these to remain useful as security keys long after the conference ends.

Verification Checklist for Attendees

• Remove the core module from the badge.
• Access the source code on GitHub.
• Use infrared light to inspect the silicon.
• Compare physical RAM arrays to the design specs.
• Deploy as a personal hardware security token.

// Conceptual representation of the Baochip's open nature
if (chip.isTransparent() && chip.sourceIsPublic()) {
    trust_level = VERIFIED;
} else {
    trust_level = BLIND_FAITH;
}