[echoangle]

That’s a good point. From reading DEF CONs statement again, I could imagine that they would claim they issued the stop work order and then got delivery of the current state, which then included the Easter egg. That’s the only way I can come up with where this makes sense. It’s also not clear to me if DEF CON really got the firmware from dmitry or if he gave the firmware to EE which then delivered it together with everything else to DEF CON.

[Aeolun]

If he was working on the firmware until the moment of his flight to Defcon, then clearly they were happy to continue taking his time and effort for free.

This also seems to be implied by Entropic, which say they did work on the badge after DEF CON stopped paying them for it.