
Competition Overview
Digital Dragons CTF 2025 is Vietnam’s leading Jeopardy-style cybersecurity competition, tailored for students and aspiring infosec talents nationwide. The event is designed to challenge participants' critical thinking and technical expertise through simulated real-world cyberattack scenarios.
The competition consists of two main rounds:
Online Qualifier (August 23, 2025)
Featuring 15 challenges across 5 categories, held over 24 hours. It’s designed to test foundational knowledge and quick reflexes.
Onsite Final in Da Nang (September 20, 2025)
Featuring 15 advanced, realistic challenges delivered in an 8-hour, high-pressure format.
Challenge categories include
Web Security, Pwnable, Cryptography, Reverse Engineering, and Miscellaneous. All content is meticulously crafted by security experts to ensure technical depth, authenticity, and educational value.
This year’s highlights:
-
Simulated scenarios based on real-world attack vectors and modern threat landscapes.
-
Progressive challenge unlocking to maintain logical flow and engagement.
-
Hidden “Easter Eggs” for curious minds to discover.
-
Digital Dragons CTF 2025 is more than a technical playground—it’s a community-driven platform that fosters creativity, collaboration, and cultivates the next generation of cybersecurity professionals.

Rules and Regulations
Eligibility Criteria
- Each team consists of 4 members. All participants must be current students enrolled at universities or colleges across Vietnam, aged between 18 and 23, and hold Vietnamese nationality. The organizers will verify student registration information to ensure eligibility.
- Ensures fairness in team structure and eligibility, preventing large discrepancies in skills or experience.
- Violation will result in team disqualification.
Registration
- Participants must register via the official competition website and provide the following details:
-
Team Information:
- Team name
- Team leader name
- Team leader contact number
-
Member Information (for each of the 4 members):
- Full Name
- University name
- Student ID
- Nickname (display name) for each member
-
Team Information:
Competition Format
- Qualification Round (Online): Held online for 24 hours on August 23, 2025. Contestants will solve 15 challenges in 5 categories: web security, cryptography, reverse engineering, pwnable, and misc.
Final Round (Onsite): Held onsite in Da Nang on September 20, 2025. Participants will solve 15 advanced challenges simulating real-world attack scenarios within 8 hours. - Provides opportunities to test real-world skills through two competitive rounds.
- Failure to participate or violating rules in the qualifier will lead to disqualification from the final round.
Code of Conduct
- All participants must strictly adhere to the following rules:
- No offensive, insulting, harassing, or threatening language or behavior toward any individual.
- No posting, sharing, or distributing copyrighted, unethical, or illegal content.
- Absolutely no tampering with or unauthorized interference in competition systems or resources.
- No spamming, irrelevant advertising, or disruption of the competition community.
- No political or religious discussions on the platform.
- Ensures a positive and fair competition environment and prevents negative behavior that may affect fairness and professionalism.
- Violations may result in a warning, disqualification, or a ban from future competitions.
Reporting Rules
- - Organizers will closely monitor team activities during the competition.
- All bug or flag reports (if applicable) must be submitted within the designated time frame.
- Report any cheating or dishonest behavior immediately. - Ensures transparency and fairness in addressing violations and issues during the competition.
- Failure to report according to procedure may lead to point loss or disqualification.
Competition Rules
- Teams must complete challenges within the given time.
- Strictly prohibited from using cheating tools, hacking, or exploiting vulnerabilities for advantage.
- Absolutely no destructive actions towards the competition system, including but not limited to: DDoS attacks, unauthorized access to other participants’ accounts, disrupting the scoring system, or compromising data integrity.
- Ensures fair competition among teams and protects the competition system from destructive behavior.
- Rule violations may lead to disqualification, complete point loss, and possibly being banned from future events.
Scoring & Prize Structure
- Scoring Method: Points for each challenge will be based on difficulty and completion level. More difficult challenges will earn more points. When a team captures a "flag," they will receive corresponding points. A detailed score table will be announced per round.
- Team Ranking: Teams will be ranked based on total accumulated points. In case of a tie, tiebreaker criteria will be applied: - Completion Time: Teams with the fastest total completion time will be ranked higher.
- Finalist Selection: Teams with the highest total accumulated scores will be considered for the final round. The ranking order is determined from highest to lowest based on each team’s total score. The Organizing Board will select up to two top-ranking teams from each university, based on the ranking board.Following this principle, the top 25 teams (after applying the limit of two teams per university) will be selected for the final round.
- Ensures fairness and transparency in scoring and awarding prizes.
- Rule violations may result in loss of prizes or removal from the leaderboard.
Prohibited Behaviors
- The following actions are strictly prohibited and may result in penalties:
- Using any cheating software, hacking tools, or exploiting system vulnerabilities.
- Harassing or disturbing other participants, including but not limited to: insulting, bullying, or intentionally disrupting the competition.
- Tampering with or interfering in the competition system, including DDoS attacks, data manipulation, or unauthorized access to the scoring system.
- Ensures fairness and professionalism in the competition. Such negative behaviors affect all participants and the integrity of the competition.
- Violations may result in disqualification, point loss, and potentially being banned from future events.

Terms and Conditions
Eligibility Criteria
Participants must be students currently enrolled in universities or colleges located in Vietnam, aged between 18 and 23 at the time of registration. Each participant must own a valid account as defined by the Organizing Committee.
Disclaimer
The Organizing Committee (OC) is not responsible for any issues beyond its reasonable control, including but not limited to technical errors, system failures, or schedule changes caused by force majeure events.
Data Privacy Policy
Personal data collected will only be used for the purposes of organizing the competition and will not be shared with third parties without the participant's consent.
Prizes & Awarding Mechanism
The scoring method will be based on a scoreboard, with points awarded based on the number of challenges completed by each team. Detailed information about prizes and the award structure will be announced later.
Rights & Obligations of Participants
Participants’ Rights: - Participants have the right to request the detailed complaint resolution procedure if any issues arise during the competition. Participants’ Obligations: - Participants are required to strictly follow the code of conduct and ethical standards throughout the competition. Any form of cheating is strictly prohibited.
Rights & Obligations of the Organizing Committee
Organizing Committee’s Rights: - The OC reserves the right to amend the rules, pause, or cancel the competition in the event of force majeure or other exceptional circumstances beyond their control. All such decisions made by the OC are final. Organizing Committee’s Obligations: - Ensure fairness and transparency by providing a level playing field, and ensure scoring and evaluation adhere to published rules. - Notify participants promptly through official channels (e.g., website, email) of any changes in rules, schedule, or important regulations. - Protect participant data in accordance with the published privacy policy and relevant laws. - Provide support channels to address inquiries, collect feedback, and resolve complaints in a timely and fair manner. - Maintain technical system stability and safety, minimizing the risk of technical failures or cyber-attacks. - Announce results and distribute prizes accurately, transparently, and on time in accordance with the competition’s regulations.
Legal Compliance & Personal Data
The Organizing Committee is committed to complying with current laws on data protection and participant privacy. Any images, videos, or personal information of participants will not be used for promotional or other purposes without the participant's explicit consent.
Legal Terms, Platform Terms of Use & Liability
- Acceptance of Terms: By accessing and using the competition website/platform, users are deemed to have accepted and agreed to abide by all the terms and conditions outlined here. - Intellectual Property: All content, images, source code, and information on the website/platform are the intellectual property of the Organizing Committee unless stated otherwise. - Limitation of Liability: The Organizing Committee is not liable for any direct or indirect damages arising from the use or inability to use the website/platform, unless otherwise provided by law. - Amendment of Terms: The OC reserves the right to update, modify, or change these terms at any time without prior notice. Continued use of the website/platform after changes implies acceptance of the revised terms.
Our Sponsors and Partners
We are honored to work together with prominent organizations and institutions in the ICT industry.