Hack2Innovate
HomeFinal Results 🏆Certificates 📜Hackathon ⚡Rules

© 2026 Hack2Innovate CTF + Hackathon. All rights reserved.

|Final Results 🏆RulesSupport
v4.15.1
CTF CODEX 2026OFFICIAL CODEX & ETHICSZERO-TOLERANCE INTEGRITY

Rules of Engagement & Code of Conduct

To ensure a fair, rigorous, transparent, and ethical competitive environment, all contestants participating in Hack2Innovate CTF + Hackathon 2026 must strictly adhere to the following Rules of Engagement.

EMERGENCY ESCALATION DESK24/7 Control Room

Platform Down or Support Chat Unreachable?

If the CTF platform experiences unexpected network downtime, or if the in-portal Support Chat is temporarily unreachable, join our official Emergency WhatsApp Community to address your queries and receive real-time announcements directly from the CTF Organizing Committee.

Join WhatsApp Community
Section 01

Rules of Engagement: Target Scope & Technical Boundaries

Explicitly In-Scope (Allowed)
  • Designated challenge web applications, URLs, and assigned port instances.
  • Downloadable challenge artifacts, source files, binary dumps, and PCAP captures.
  • Reverse engineering, disassembly, binary debugging, and cryptographic analysis.
  • Exploiting web logic flaws, SQL injection, XSS, SSRF, command execution on specified targets.
Strictly Out-of-Scope (Forbidden)
  • Attacking the central scoring platform infrastructure (portals, auth, database).
  • Denial of Service (DoS/DDoS) attacks, automated high-volume stress testing.
  • Automated aggressive directory busters or fuzzers with over 100 concurrent threads.
  • Attacking or probing other contestants, teams, or campus local networks.
Section 02

Anti-Cheat, Collusion & Zero Flag-Sharing Policy

Zero Flag Sharing Policy:Sharing flags, partial payloads, solution hints, decryptor keys, or step-by-step methodologies across competing teams is strictly forbidden. Any collusion detected will trigger instant disqualification of both parties.
Automated AI Detection & Heuristic Monitoring:The platform actively employs real-time anomaly detection that tracks superhuman solve velocities, LLM prompt fingerprints, multi-domain concurrent solves, and scripted submission bursts. Flag submissions found to contain synthetic AI artifacts or rapid script bursts will be flagged for manual jury review.
Mandatory Write-up Submission for Top Teams:The top 10 teams on the leaderboard must submit reproducible technical write-ups and PoC scripts within 60 minutes after the CTF concludes to validate final prize eligibility.
Section 03

Squad Composition & Contestant Eligibility

  • Squad Sizing: Teams can consist of 1 to 4 members. Solo participants are fully permitted.
  • Student Status: All contestants must be enrolled students at a recognized collegiate institution or university and hold a valid student registration number.
  • Captain Autonomy: The team captain is responsible for managing member invites, squad adjustments, and official write-up submissions.
  • Roster Locking: Once the 10-hour CTF begins, team switching, leaving squads, or merging rosters is frozen to maintain leaderboard integrity.
Section 04

Scoring Architecture & Tie-Breaking Matrix

Dynamic Parabolic Decay Scoring

High-value challenges start at 500 points and decay quadratically toward a floor of 100 points as more teams solve the target (decay threshold: 30 solves).

Deterministic Tie-Breaking

If two or more teams finish with identical total points, the team that reached the tied score at an earlier timestamp will be ranked higher on the leaderboard.

Scoreboard Freeze

The public scoreboard freezes 2 hours prior to the conclusion of the 10-hour CTF to build suspense for the final prize ceremony.

Hint Deductions

Unlocking optional challenge hints incurs explicit point deductions directly deducted from your team's score. Free hints cost 0 points.

Section 05

Flag Submission Syntax & Formatting

All captured flags must be submitted in the standardized wrapper format:

CTF{s0m3_fl4g_h3r3}Case-sensitive UTF-8

Ensure there are no leading or trailing whitespace characters. Rate limits allow a maximum of 15 flag submissions per minute per contestant.

Section 06

Disciplinary Escalation & Penalty Matrix

Violation SeverityInfraction ExampleEnforcement Action
Tier 1: MinorRate limit bursting, unintentional scanner floodingFormal warning & 5-minute submission cooldown
Tier 2: ModerateAttacking non-challenge URLs, unauthorized credential sharing20% to 50% Point deduction & solve nullification
Tier 3: SevereFlag sharing, DoS attacks on portal, cross-team collusionImmediate disqualification, account ban & university reporting

Ready to enter the Challenge Arena?

Review your team setup, test your cryptographic tools, and analyze the live targets.

Join WhatsApp Community