Digital Dragons CTF 2026

Contest Information

An international Jeopardy-style CTF for students and emerging cybersecurity talent, focused on practical challenges, exploitation thinking, and security problem solving in realistic environments.

Qualifier
Aug 23, 2026 · Online
Final
Sep 20, 2026 · Da Nang
Team Size
Up to 04 members
Categories
Web · Crypto · Pwn · Reverse · Misc
Digital Dragons CTF participants
02 Rounds
15 Challenges per round
05 Technical categories
04 Members per team

Contest overview

Competition Overview

Digital Dragons CTF 2026 is a Jeopardy-style cybersecurity competition for students and emerging security talent who want to prove their skills through practical challenges. Teams will work through exploitation, cryptography, reverse engineering, pwnable, and mixed security scenarios in a professional competition environment.

Round 01

Online Qualifier

August 23, 2026 · 24 hours · Online

15 challenges across 5 categories, designed to test technical fundamentals, analysis speed, and team coordination.

Round 02

Onsite Final in Da Nang

September 20, 2026 · 8 hours · VKU

15 advanced challenges built around realistic attack scenarios for the top teams from the qualifier.

Challenge categories

Web Security Pwnable Cryptography Reverse Engineering Miscellaneous

Every challenge is crafted by security experts to balance practical realism, technical depth, and educational value.

  • Real-world attack scenarios aligned with current threat trends.
  • Progressive challenge unlocking to keep the competition flow clear and engaging.
  • Hidden Easter Eggs for curious players who like to explore deeper.
  • A community platform for young cybersecurity talent, creativity, and collaboration.

Before registering, prepare

  • Team leader details, student email, and contact phone number.
  • Member names, student IDs, schools, and competition nicknames.
  • Up to 04 members per team, with no member changes during the competition.
  • Check official email and Discord for qualifier instructions.

Prizes

trophy

First Prize

10,000,000 VND
trophy

Second Prize

7,000,000 VND
trophy

Third Prize

4,000,000 VND
trophy

2 Consolation Prizes, each prize is

1,000,000 VND
The top teams that are qualified for the Final Round onwards will be provided free accommodation at Da Nang City and will be competing at VKU.
*: Terms and Conditions are applied. Please read them carefully under the Terms and Conditions section.
Rules and Regulations

Rules and Regulations

Team Composition

  • 4 members per team, participants must be students from universities nationwide, aged between 18 and 23, and hold Vietnamese nationality.
  • Ensures fairness in team composition and eligibility, preventing any large discrepancies in skills or experience.
  • Violation will lead to disqualification from the competition.

Eligibility Criteria

  • Only for students aged 18-23, currently enrolled in Vietnamese universities. There will be a verification step by Evvolabs to confirm the legitimacy of the students
  • Ensures fairness by limiting participation to those in the eligible age and student category.
  • Ineligible participants will be disqualified.

Registration & Competition Method

  • Register via the official competition website (EvvoLabs). What information is required for registration?
    1. Team Information:
      • Team name
      • Leader name
      • Leader's phone contact number
    2. Member Information (team up to 4 members):
      • Full Name
      • School Name
      • Student ID
      • Student Email
      • Nickname (display name) for each member
  • Qualifier Round: Online competition, lasting 24 hours on August 23, 2026. Participants will solve 15 challenges across 5 categories. (web security, cryptography, reverse engineering, pwnable, misc)
  • Final Round: Onsite competition in Da Nang on September 20, 2026. Participants will solve 15 advanced challenges with real-world attack scenarios in 8 hours. (Register through the official competition website.)
  • Ensures fairness in registration and competition, providing an opportunity to test real-world skills across two rounds.
  • Failure to properly register will lead to disqualification. Failure to participate or violate rules in the qualifier will result in ineligibility for the final round.

Communication Rules

Participants must adhere to the following principles:
  • Do not use hostile, insulting, threatening language, or harass others.
  • Do not post, share, or distribute content that violates copyright, ethics, or laws.
  • Do not upload or spread materials containing malware or harmful software.
  • Do not spam, post inappropriate advertisements, or disrupt the competition community.
  • Do not discuss political or religious issues on the CyberJutsu platform.
  • Ensures a positive and fair competition environment, preventing negative behavior that could impact fairness and professionalism in the event.
  • Violations may result in warnings, disqualification, or banning from the future event.

Reporting Rules

  • Participants must report issues/flags according to the established process.
  • Report any cheating or dishonest behavior immediately.
  • What is the process and method for reporting bugs/flags/cheating violations?
  • Ensures transparency and fairness in addressing issues and violations during the competition.
  • Failure to report properly may lead to point deductions or disqualification.

Competition Rules

  • Teams must complete challenges within the designated time.
  • Using cheating software, hacking, or exploiting system vulnerabilities is prohibited.
  • Sabotaging the competition system is prohibited, including but not limited to: launching denial-of-service (DDoS) attacks, manipulating data on the competition platform, hacking into the competition's supporting systems, or disrupting the scoring system's functionality.
  • Ensures that all teams compete fairly and without cheating, while protecting the competition system from destructive behaviors.
  • Violations may result in disqualification from the competition, loss of all points, and possibly being banned from future events.

Scoring Method & Prize Structure

1. Scoring method:
  • Points for each challenge:
    • The points for each challenge will be evaluated based on its difficulty and completion level. Challenges with higher difficulty will earn more points. When a team successfully solves a challenge and captures the "flag," they will earn points corresponding to the difficulty of that challenge.
    • The points for each challenge will be announced in detail during each round of the competition.
2. How to determine the winning team:
  • Winning conditions:
    • The winning team of the competition will be the one that accumulates the highest score by the end of the competition. If multiple teams have the same score, tiebreaker criteria (if any) will be applied to determine the winner.
  • Secondary criteria (if any):
    • Time to Complete: In case of a tie in points, the team that completes the challenges in the shortest total time will be ranked higher.
3. Select the team for the final:
  • Finalist Selection:
    • Based on the ranking results, the top 25 teams with the highest scores will be selected for the final round. Teams will be ranked from highest to lowest based on the accumulated points throughout the competition.
  • Ensures fairness and transparency in scoring and prize allocation.
  • Violations may lead to losing prizes or being removed from the leaderboard.

Prohibited Actions

  1. Using cheating software, hacking, or exploiting system vulnerabilities.
  2. Harassing or disrupting other participants, including behaviors such as insulting, bullying, or intentionally disturbing the competition.
  3. Sabotaging the competition system, including actions such as launching denial-of-service (DDoS) attacks, modifying data on the competition platform, or interfering with the scoring system.
  • Ensures fairness and professionalism in the competition. Negative actions that affect other participants and the fairness of the event are prohibited.
  • Violations may result in disqualification, point deductions, and possibly a ban from future events.
steps-img

Terms and Conditions

Eligibility Criteria

Participants must be students currently enrolled in universities or colleges located in Vietnam, aged between 18 and 23 at the time of registration. Each participant must own a valid account as defined by the Organizing Committee.

Disclaimer

The Organizing Committee (OC) is not responsible for any issues beyond its reasonable control, including but not limited to technical errors, system failures, or schedule changes caused by force majeure events.

Data Privacy Policy

Personal data collected will only be used for the purposes of organizing the competition and will not be shared with third parties without the participant's consent.

Prizes & Awarding Mechanism

The scoring method will be based on a scoreboard, with points awarded based on the number of challenges completed by each team. Detailed information about prizes and the award structure will be announced later.

Rights & Obligations of Participants

Participants’ Rights: - Participants have the right to request the detailed complaint resolution procedure if any issues arise during the competition. Participants’ Obligations: - Participants are required to strictly follow the code of conduct and ethical standards throughout the competition. Any form of cheating is strictly prohibited.

Rights & Obligations of the Organizing Committee

Organizing Committee’s Rights: - The OC reserves the right to amend the rules, pause, or cancel the competition in the event of force majeure or other exceptional circumstances beyond their control. All such decisions made by the OC are final. Organizing Committee’s Obligations: - Ensure fairness and transparency by providing a level playing field, and ensure scoring and evaluation adhere to published rules. - Notify participants promptly through official channels (e.g., website, email) of any changes in rules, schedule, or important regulations. - Protect participant data in accordance with the published privacy policy and relevant laws. - Provide support channels to address inquiries, collect feedback, and resolve complaints in a timely and fair manner. - Maintain technical system stability and safety, minimizing the risk of technical failures or cyber-attacks. - Announce results and distribute prizes accurately, transparently, and on time in accordance with the competition’s regulations.

Legal Compliance & Personal Data

The Organizing Committee is committed to complying with current laws on data protection and participant privacy. Any images, videos, or personal information of participants will not be used for promotional or other purposes without the participant's explicit consent.

Legal Terms, Platform Terms of Use & Liability

- Acceptance of Terms: By accessing and using the competition website/platform, users are deemed to have accepted and agreed to abide by all the terms and conditions outlined here. - Intellectual Property: All content, images, source code, and information on the website/platform are the intellectual property of the Organizing Committee unless stated otherwise. - Limitation of Liability: The Organizing Committee is not liable for any direct or indirect damages arising from the use or inability to use the website/platform, unless otherwise provided by law. - Amendment of Terms: The OC reserves the right to update, modify, or change these terms at any time without prior notice. Continued use of the website/platform after changes implies acceptance of the revised terms.

Our Sponsors and Partners

We are honored to work together with prominent organizations and institutions in the cybersecurity industry.

agest Argibank BA NA Hills BIDV
Endorsed By
NCA ORG

Are you ready to participate in a game of Capture the Flag?

Sign up for the Digital Dragons: The Cybersecurity Competition 2026 and step into the world of cybersecurity.