Contest Format

Jeopardy-Style CTF Challenges

2 DAYS 7 HOURS EACH
|
3 TASKS 100 PTS EACH

Competition Format

ICO 2026 features two separate 7-hour competition days with jeopardy-style CTF challenges. Each day is independent -- no tasks are repeated between competition days.

Jeopardy-Style CTF

Each competition day features 3 tasks, each worth 100 points. Tasks are split into subtasks with multiple flags. The competition is cloud-hosted and accessed through a Wireguard VPN connection.

  • 3 tasks per day, 100 points each (300 total per day)
  • Tasks split into subtasks with individual flags
  • Individual scoring -- contestants ranked independently
  • No bonus points for first solves or clever solutions
  • Real-time scoreboard updates

6 Challenge Categories

Tasks and subtasks span six categories. Getting a medal requires skills across a broad range of topics.

  • Binary Exploitation -- memory corruption, shellcoding, x86_64
  • Cryptography -- modern protocols, mathematical and implementation flaws
  • Digital Forensics -- hidden data extraction, steganography, post-exploitation analysis
  • Reverse Engineering -- compiled binaries, bytecode, obfuscated source
  • Web Security -- server and client side vulnerabilities
  • Miscellaneous -- mobile security, network security, AI, cloud, radio, etc.

Scoring System

Transparent and fair scoring across both competition days

Task Points

Each task is worth 100 points, split into subtasks. Submit the correct flag for a subtask to earn its points.

Tie-Breaking

Ties are broken by the sum of last point-increase times per day, in ascending order. No bonus points for first solves.

Individual Ranking

Contestants are ranked individually based on the sum of points across both competition days.

Medals

Gold, Silver, and Bronze medals awarded based on final individual rankings (exact ratios subject to confirmation).

Fair Play

Strict anti-cheating measures enforced. All solutions verified by the Scientific Committee.

Equal Opportunity

Same challenges, same timing, same resources for all contestants.

Participant Requirements

Team Composition

  • 1 to 4 contestants per team
  • 1 Leader and a Deputy Leader
  • Contestants must not be older than 20 on 1st of July 2026
  • Must represent their country/territory

Technical Skills

  • Proficiency in at least one programming language
  • Understanding of networking fundamentals
  • Basic knowledge of operating systems
  • Familiarity with common security tools

Competition Environment

  • Contestants must bring their own laptop (one each)
  • Cloud-hosted platform accessed via Wireguard VPN
  • No additional devices in the arena (including mobile phones)
  • No external monitors or desktop computers

Preparation Resources

  • Practice on CTF platforms (CTFtime, PicoCTF)
  • Study OWASP Top 10 vulnerabilities
  • Learn incident response procedures
  • Practice with security tools (Wireshark, Burp Suite)

Ready to Compete?

Register your team for ICO 2026 Australia