At Defcon 34, Andrew “bunnie” Huang designed conference badges around his Baochip-1x, a mostly open-source RISC-V microcontroller that can be removed and used as a hardware security token. The chip’s infrared-transparent package lets researchers verify its silicon against published designs, and its firmware, crypto engines, and OS are available on GitHub for inspection and hacking.

• Bunnie Huang's Baochip-1x powers 27,000 Defcon 34 badges, with the full stack (processor, crypto engines, firmware, OS) open-sourced on GitHub
• The chip's IR-transparent packaging lets anyone with an IR light verify the silicon matches the published design, addressing manufacturing-stage backdoor risks
• Huang cut fab costs by piggybacking his RISC-V core onto Crossbar's 22nm wafer run, sharing the die with Crossbar's proprietary ARM core
• The badge's detachable module is a FIDO-compliant hardware security key with TOTP support, RRAM-based secret storage, and a QR camera—claimed to be the first token with fully inspectable bootloader and transistors