Terms of
Engagement
This guide outlines the eligibility criteria, rules, and general conditions for participating in the Fluid Attacks CTF.
Participation requirements
Eligibility
The Fluid Attacks CTF is strictly an individual competition. Fluid Attacks does not allow team formation or collaboration among participants.
This competition is restricted to citizens or permanent residents of Latin American and Caribbean countries.
Account policy
Participants may have only one (1) account.
The creation of alternate accounts (sockpuppets), test accounts, or the sharing of account access is forbidden and will result in an immediate rejection of all associated accounts.
Registration
Each applicant must register for the CTF via the official form. All information provided must be complete and truthful.
Each applicant's registration data will be cross-checked against their public LinkedIn information. They must ensure that their profile is accurate and up to date with their current employment or academic status before submitting the application.
If the CTF form prohibits an applicant from entering their LinkedIn profile because it is already in use by someone else, the applicant should notify Fluid Attacks of this issue at [email protected].
If the applicant is a permanent resident of a country in Latin America or the Caribbean but their LinkedIn profile does not reflect this, they must send proof of residency to the Fluid Attacks email address provided above.
Review and approval
Fluid Attacks' organizing team reviews applications. The approval is not automatic and depends on eligibility requirements and available capacity.
Once an application has been approved or rejected, Fluid Attacks will email the applicant.
Rejection criteria
A registration will be automatically rejected if:
The provided LinkedIn profile is nonexistent, has no connections, or has no verifiable history.
The applicant is not a citizen or legal resident of a Latin American or Caribbean country.
The information is false, incomplete, or does not match the professional or academic identity on LinkedIn.
The applicant has been banned from any previous edition of the Fluid Attacks CTF.
Participation rules
During the CTF, participants must not:
Share solutions, write-ups, flags, or techniques with other participants (they may do so only after at least 48 hours have passed since the end of the CTF; doing so earlier would result in disqualification from the competition).
Solve challenges together with other participants or engage in any other form of collaboration.
Use multiple accounts or impersonate others.
Submit flags via brute force or automate mass submissions.
Attack the CTF infrastructure or attempt to cause a DoS/DDoS.
Sabotage or interfere with the performance of other participants.
Fair play and penalties
Participants who commit any form of fraud in the CTF will be:
Immediately disqualified from the competition.
Permanently banned from future editions.
Removed from all cumulative rankings: Their past and current scores will no longer count toward any individual, company, university, or country cumulative rankings.
Community standards
All participants are required to behave respectfully and professionally at all times; therefore, harassment, discrimination, and any unethical behavior are not permitted. This applies to all communication channels used in the competition (Discord, email, the CTF platform, etc.). Any violation may result in immediate disqualification from the current CTF and permanent exclusion from future editions.
Use of AI tools
The use of AI tools during the competition is permitted. However, participants are expected to understand any solution they submit. Fluid Attacks reserves the right to request detailed write-ups from any participant at any time to validate their score. A participant's failure to demonstrate an understanding of the submitted solution may result in their disqualification from the CTF.
Ranking and prizes
For corporate and institutional rankings, subsidiary companies, branches, or brands belonging to the same parent holding group will be grouped under the main parent company's name.
Fluid Attacks awards the sole CTF prize to the participant who achieves first place overall in the competition.
To validate the provisional winner's score at the end of the CTF, organizers will present three challenges from the competition. The winner has 24 hours to submit a detailed technical write-up of their solutions. If they do not respond, the challenges will be sent to the second- and third-place participants, who also have 24 hours to reply. If the second-place participant answers correctly and on time, they win the prize. If not, and the third-place participant answers correctly, they win. If no one responds, Fluid Attacks will not award any prizes for the CTF.
Fluid Attacks disburses the prize after reviewing and approving the solutions to these final challenges.
Data privacy
By registering, the applicant authorizes Fluid Attacks to review their public LinkedIn profile for profiling purposes (e.g., to verify their residence in Latin America, current employment, or student status). This data will be used exclusively for eligibility verification, competition statistics, and rankings, and will not be sold to third parties.
Technical issues related to the CTF challenges or platform should be reported via the CTF's official Discord server.
All other questions, concerns, or requests should be sent to [email protected].
By registering and participating, the participant agrees to comply with all rules set forth herein and to accept the consequences of noncompliance.
Fluid Attacks may conduct investigations after the competition and retroactively disqualify participants who violated any of the rules mentioned above. Therefore, the rankings may be affected by these investigations.
