Digital Dragons CTF 2026
Contest Information
An international Jeopardy-style CTF for students and emerging cybersecurity talent, focused on practical challenges, exploitation thinking, and security problem solving in realistic environments.
- Qualifier
- Aug 23, 2026 · Online
- Final
- Sep 20, 2026 · Da Nang
- Team Size
- Up to 04 members
- Categories
- Web · Crypto · Pwn · Reverse · Misc
Contest overview
Competition Overview
Digital Dragons CTF 2026 is a Jeopardy-style cybersecurity competition for students and emerging security talent who want to prove their skills through practical challenges. Teams will work through exploitation, cryptography, reverse engineering, pwnable, and mixed security scenarios in a professional competition environment.
Online Qualifier
August 23, 2026 · 24 hours · Online
15 challenges across 5 categories, designed to test technical fundamentals, analysis speed, and team coordination.
Onsite Final in Da Nang
September 20, 2026 · 8 hours · VKU
15 advanced challenges built around realistic attack scenarios for the top teams from the qualifier.
Challenge categories
Every challenge is crafted by security experts to balance practical realism, technical depth, and educational value.
- Real-world attack scenarios aligned with current threat trends.
- Progressive challenge unlocking to keep the competition flow clear and engaging.
- Hidden Easter Eggs for curious players who like to explore deeper.
- A community platform for young cybersecurity talent, creativity, and collaboration.
Before registering, prepare
- Team leader details, student email, and contact phone number.
- Member names, student IDs, schools, and competition nicknames.
- Up to 04 members per team, with no member changes during the competition.
- Check official email and Discord for qualifier instructions.
Rules and Regulations
Team Composition
- 4 members per team, participants must be students from universities nationwide, aged between 18 and 23, and hold Vietnamese nationality.
- Ensures fairness in team composition and eligibility, preventing any large discrepancies in skills or experience.
- Violation will lead to disqualification from the competition.
Eligibility Criteria
- Only for students aged 18-23, currently enrolled in Vietnamese universities. There will be a verification step by Evvolabs to confirm the legitimacy of the students
- Ensures fairness by limiting participation to those in the eligible age and student category.
- Ineligible participants will be disqualified.
Registration & Competition Method
- Register via the official competition website (EvvoLabs). What information is required for registration?
-
Team Information:
- Team name
- Leader name
- Leader's phone contact number
-
Member Information (team up to 4 members):
- Full Name
- School Name
- Student ID
- Student Email
- Nickname (display name) for each member
-
Team Information:
- Qualifier Round: Online competition, lasting 24 hours on August 23, 2026. Participants will solve 15 challenges across 5 categories. (web security, cryptography, reverse engineering, pwnable, misc)
- Final Round: Onsite competition in Da Nang on September 20, 2026. Participants will solve 15 advanced challenges with real-world attack scenarios in 8 hours. (Register through the official competition website.)
- Ensures fairness in registration and competition, providing an opportunity to test real-world skills across two rounds.
- Failure to properly register will lead to disqualification. Failure to participate or violate rules in the qualifier will result in ineligibility for the final round.
Communication Rules
Participants must adhere to the following principles:
- Do not use hostile, insulting, threatening language, or harass others.
- Do not post, share, or distribute content that violates copyright, ethics, or laws.
- Do not upload or spread materials containing malware or harmful software.
- Do not spam, post inappropriate advertisements, or disrupt the competition community.
- Do not discuss political or religious issues on the CyberJutsu platform.
- Ensures a positive and fair competition environment, preventing negative behavior that could impact fairness and professionalism in the event.
- Violations may result in warnings, disqualification, or banning from the future event.
Reporting Rules
- Participants must report issues/flags according to the established process.
- Report any cheating or dishonest behavior immediately.
- What is the process and method for reporting bugs/flags/cheating violations?
- Ensures transparency and fairness in addressing issues and violations during the competition.
- Failure to report properly may lead to point deductions or disqualification.
Competition Rules
- Teams must complete challenges within the designated time.
- Using cheating software, hacking, or exploiting system vulnerabilities is prohibited.
- Sabotaging the competition system is prohibited, including but not limited to: launching denial-of-service (DDoS) attacks, manipulating data on the competition platform, hacking into the competition's supporting systems, or disrupting the scoring system's functionality.
- Ensures that all teams compete fairly and without cheating, while protecting the competition system from destructive behaviors.
- Violations may result in disqualification from the competition, loss of all points, and possibly being banned from future events.
Scoring Method & Prize Structure
1. Scoring method:
- Points for each challenge:
- The points for each challenge will be evaluated based on its difficulty and completion level. Challenges with higher difficulty will earn more points. When a team successfully solves a challenge and captures the "flag," they will earn points corresponding to the difficulty of that challenge.
- The points for each challenge will be announced in detail during each round of the competition.
2. How to determine the winning team:
- Winning conditions:
- The winning team of the competition will be the one that accumulates the highest score by the end of the competition. If multiple teams have the same score, tiebreaker criteria (if any) will be applied to determine the winner.
- Secondary criteria (if any):
- Time to Complete: In case of a tie in points, the team that completes the challenges in the shortest total time will be ranked higher.
3. Select the team for the final:
- Finalist Selection:
- Based on the ranking results, the top 25 teams with the highest scores will be selected for the final round. Teams will be ranked from highest to lowest based on the accumulated points throughout the competition.
- Ensures fairness and transparency in scoring and prize allocation.
- Violations may lead to losing prizes or being removed from the leaderboard.
Prohibited Actions
- Using cheating software, hacking, or exploiting system vulnerabilities.
- Harassing or disrupting other participants, including behaviors such as insulting, bullying, or intentionally disturbing the competition.
- Sabotaging the competition system, including actions such as launching denial-of-service (DDoS) attacks, modifying data on the competition platform, or interfering with the scoring system.
- Ensures fairness and professionalism in the competition. Negative actions that affect other participants and the fairness of the event are prohibited.
- Violations may result in disqualification, point deductions, and possibly a ban from future events.
Terms and Conditions
Eligibility Criteria
Participants must be students currently enrolled in universities or colleges located in Vietnam, aged between 18 and 23 at the time of registration. Each participant must own a valid account as defined by the Organizing Committee.
Disclaimer
The Organizing Committee (OC) is not responsible for any issues beyond its reasonable control, including but not limited to technical errors, system failures, or schedule changes caused by force majeure events.
Data Privacy Policy
Personal data collected will only be used for the purposes of organizing the competition and will not be shared with third parties without the participant's consent.
Prizes & Awarding Mechanism
The scoring method will be based on a scoreboard, with points awarded based on the number of challenges completed by each team. Detailed information about prizes and the award structure will be announced later.
Rights & Obligations of Participants
Participants’ Rights: - Participants have the right to request the detailed complaint resolution procedure if any issues arise during the competition. Participants’ Obligations: - Participants are required to strictly follow the code of conduct and ethical standards throughout the competition. Any form of cheating is strictly prohibited.
Rights & Obligations of the Organizing Committee
Organizing Committee’s Rights: - The OC reserves the right to amend the rules, pause, or cancel the competition in the event of force majeure or other exceptional circumstances beyond their control. All such decisions made by the OC are final. Organizing Committee’s Obligations: - Ensure fairness and transparency by providing a level playing field, and ensure scoring and evaluation adhere to published rules. - Notify participants promptly through official channels (e.g., website, email) of any changes in rules, schedule, or important regulations. - Protect participant data in accordance with the published privacy policy and relevant laws. - Provide support channels to address inquiries, collect feedback, and resolve complaints in a timely and fair manner. - Maintain technical system stability and safety, minimizing the risk of technical failures or cyber-attacks. - Announce results and distribute prizes accurately, transparently, and on time in accordance with the competition’s regulations.
Legal Compliance & Personal Data
The Organizing Committee is committed to complying with current laws on data protection and participant privacy. Any images, videos, or personal information of participants will not be used for promotional or other purposes without the participant's explicit consent.
Legal Terms, Platform Terms of Use & Liability
- Acceptance of Terms: By accessing and using the competition website/platform, users are deemed to have accepted and agreed to abide by all the terms and conditions outlined here. - Intellectual Property: All content, images, source code, and information on the website/platform are the intellectual property of the Organizing Committee unless stated otherwise. - Limitation of Liability: The Organizing Committee is not liable for any direct or indirect damages arising from the use or inability to use the website/platform, unless otherwise provided by law. - Amendment of Terms: The OC reserves the right to update, modify, or change these terms at any time without prior notice. Continued use of the website/platform after changes implies acceptance of the revised terms.
Our Sponsors and Partners
We are honored to work together with prominent organizations and institutions in the cybersecurity industry.