Live · 40 min leftCRYPTO HANDS-ON
DEF CON 34 · Your live shortlist
What’s happening now?
38 selected AI, crypto, security, workshop, and village sessions · Las Vegas time
Static snapshot generated Saturday, Aug 8 at 3:20 PM PDT. Live refresh activates when scripts are allowed.
Saturday, Aug 8 · PDT
Happening now
4 sessionsLive · 40 min leftCRYPTO + QUANTUM
ECDSA.fail: Beating Google's Hidden Quantum Circuit with Open, Verifiable Autoresearch
Live · 160 min leftAI WORKSHOP
Building Agentic Reverse Engineering "Skills"
Live · 160 min leftAI WORKSHOP
From Prompt to PWN: Exploiting LLM Powered Web Applications with OWASP Techniques
Starting soon
3 sessions · 60 minIn 10 min · 3:30 PMAI
Wrestling with a Python: Escaping Copilot Studio's AI-Guarded Sandbox
In 40 min · 4:00 PMAI
Hacking Your Life with AI Can Get You Hacked: How AI Orchestration Platforms Ship RCE by Design
In 40 min · 4:00 PMCRYPTO HANDS-ON
Web3 Security: Hacks, Scams, and Exploits
Official floor map
Tap any green room location above to jump here. Markers are approximate room centers over DEF CON’s official floorplan.
100%
702×26059041006
Room 702: Multi-Chain Exploitation & ATM Attacks; Web3 Security: Hacks, Scams, and Exploits · Room 605: ECDSA.fail: Beating Google's Hidden Quantum Circuit with Open, Verifiable Autoresearch · Room 904: Wrestling with a Python: Escaping Copilot Studio's AI-Guarded Sandbox · Room 1006: Hacking Your Life with AI Can Get You Hacked: How AI Orchestration Platforms Ship RCE by Design
Happening now
Starting soon
Complete 38-session shortlist
This section is ordinary HTML and remains readable even when a phone, mail app, or file preview blocks scripts.
Friday, August 7
- Breaking the Ethereum Phone: From BootROM to Wallet Signing KeysWest 3 - 1007 (Main Track 2)
- Breaking Local AI Runtimes: Exploiting llama.cpp and OllamaWest 3 - 1007 (Main Track 2)
- Shopping Is The Attack: A Decade Of E-Commerce Scalper Wars, And The Multi-Agent AI EraWest 3 - 903 (Main Track 5)
- Can AI do novel security research? Meet the HTTP TerminatorWest 3 - 906 (Main Track 3)
- Wiring the Harness: Orchestrating Frontier Models for Vulnerability Hunting at ScaleWest 3 - 1104 (Creator Stage 4)
- Hunting for Cryptographic Ghosts: Signature Malleability and Replay Attacks in EVM Bridges & Multi-SigsWest 3 - 1102 (Creator Stage 6)
- The Sandbox is a Suggestion: Deconstructing AI Agent SandboxesWest 3 - 1006 (Main Track 1)
- Hacking AIWest 3 - 1006 (Main Track 1)
- One Chain to Own Them All - Breaking AI InfrastructuresWest 3 - 903 (Main Track 5)
Saturday, August 8
- Words As Weapons: Breaking AI and Agents; Then Securing ThemLevel 2 - W229 (Workshops)
- PMTC: One-Click RCE and Persistent Exfil in AI Coding AgentsWest 1 - 309, Red Team Village (Tactic Table 2)
- Ghost in the PipelineWest 2 - 702 (Cryptocurrency Village)
- Hunting the Contagious Trader Delivery NetworkWest 2 - 501 (Recon Village)
- X-Ray Your Agents: Pentesting MCPs, Skills, and the Plugin Supply ChainWest 3 - 900 (Demo Labs Track 4)
- Hacking a Crypto Hardware WalletWest 2 - 702 (Cryptocurrency Village)
- Zealot: An Autonomous Cloud Offensive Multi-Agent SystemWest 3 - 900 (Demo Labs Track 4)
- Evading LLM DetectionWest 3 - 1103 (Creator Stage 5)
- Building Agentic Reverse Engineering "Skills"Level 2 - W231 (Workshops)
- From Prompt to PWN: Exploiting LLM Powered Web Applications with OWASP TechniquesLevel 2 - W229 (Workshops)
- PromptPwn: Finding and Exploiting AI-Generated Vulnerabilities at ScaleWest 3 - 901 (Demo Labs Track 5)
- The Agentic Free Pass: Does an Abliterated Backbone Make Agents Easier to Attack?West 2 - 603 (AI Village)
- Multi-Chain Exploitation & ATM AttacksWest 2 - 702 (Cryptocurrency Village)
- ECDSA.fail: Beating Google's Hidden Quantum Circuit with Open, Verifiable AutoresearchWest 2 - 605 (Quantum Village)
- Wrestling with a Python: Escaping Copilot Studio's AI-Guarded SandboxWest 3 - 904 (Main Track 4)
- Hacking Your Life with AI Can Get You Hacked: How AI Orchestration Platforms Ship RCE by DesignWest 3 - 1006 (Main Track 1)
- Web3 Security: Hacks, Scams, and ExploitsWest 2 - 702 (Cryptocurrency Village)
- Taming the Swarm: Hard Architectural Lessons from Building a Deterministic Agentic Web Pentesting SystemWest 3 - 904 (Main Track 4)
- How much of our Bluetooth firmware reverse engineering work can now be automated with LLMs?West 3 - 1007 (Main Track 2)
- OffGuard: Breaking the Most Popular AI Gateway from Auth Bypass to Cloud CompromiseWest 3 - 903 (Main Track 5)
- SADF: A Taxonomy and Evaluation Framework for Agentic Security FailuresWest 3 - 801 (Creator Stage 1)
Sunday, August 9
- No Prompt Required: Pre-Task RCE in Google Gemini CLIWest 3 - 906 (Main Track 3)
- A Billion-User Blast Radius: Owning ChatGPT's Secure SandboxWest 3 - 1103 (Creator Stage 5)
- Beyond the Ceremony: The 2026 Passkey Attack SurfaceWest 3 - 1007 (Main Track 2)
- Your WAF Blocked Us, That Was The Exploit - Remote Agent Takeover via Cloudflare, Sentry and Claude Zero-DayWest 3 - 1006 (Main Track 1)
- Pwning Agentic Browsers with PleaseFix: A New Vulnerability Class for 0-Click TakeoverWest 3 - 1105 (Creator Stage 3)
- Breaking CiphersWest 2 - 702 (Cryptocurrency Village)
- CUDA've done better - Hacking Nvidia GPUs for container escape and privilege escalationWest 3 - 906 (Main Track 3)
- Modern Topics in CryptographyWest 2 - 702 (Cryptocurrency Village)