Hardware Havoc
This contest offers security researchers an opportunity to identify security vulnerabilities in provided hardware devices and receive rewards based on their findings. Please note that all participants must sign an NDA, restricting public disclosure of discovered vulnerabilities until the relevant vendor resolves the issue.
To help facilitate the hacking experience, we will provide the tools (limited quantities) required for hardware hacking, such as Digital Oscilloscope, Proxmark3, Hot Air Rework Station, Universal Programmer TNM5000 etc.
A valid conference pass is required to participate in this contest.
Participating Vendors

Target Devices
Category | Product | Product Info |
---|---|---|
Wearable | Xiaomi Watch S4 | https://www.mi.com/sg/product/xiaomi-watch-s4/ |
Camera | Xiaomi Smart Camera C500 Pro | https://www.mi.com/sg/product/xiaomi-smart-camera-c500-pro/ |
Camera | Xiaomi Outdoor Camera BW500 | https://www.mi.com/sg/product/xiaomi-outdoor-camera-bw500/ |
Smartphone | Xiaomi 15 | https://www.mi.com/sg/event/xiaomi-15-series/ |
Report Submission Guideline
- Bug Bounty & Disclosure Policy:
- General Reward Guideline:
- Rewards are based on the severity of the findings with an extra event specific bonus for qualified reports rated as High and Critical severity.
* Report Title: Please include the event tag [2025Offbyone] in the title when you submit the report