HTX CTF Terms & Conditions
Eligibility
1.This challenge is open to Singapore citizens and Permanent Residents only.
2. HTX's employees are not eligible to participate.
Contest Procedure
3. By entering this challenge, the participant agrees to be bound by the following terms and conditions:
- All participants must login to their Singpass before they are allowed to fill in the registration form via FormSG.
- In the registration form, HTX requires your Name, Email and Mobile number ("Your Contact Details") for the purpose of processing your registration, administering the competition, onboarding you to the competition platform and communicating with you.
- Registration will be closed on the 26 March, 1200H (GMT+8).
- After registration is closed, participants will receive an email invitation from SANS to register an account in Ranges.io.
- All participants may begin playing the Preliminary round from 31 Mar 2026, 0900H (GMT+8). The final flag submission deadline is 02 Apr 2026, 0900H (GMT+8).
- Participants may log in and out of the platform any time during the above period to attempt the challenges.
- HTX CTF is for individuals and participants are to attempt the questions on their own.
- Participants must not attempt to probe or attack the host server. Any such attempts will result in disqualification.
- At the end of the Preliminary round, the top 40 participants will advance to the onsite finals at CTF area at DEF CON SG on 28 Apr 2026. HTX will contact these participants, and they must confirm their attendance by the stated deadline.
- All 40 finalists must be physically present at the designated competition venue on the specified date and time to compete in the onsite finals. Failure to attend will result in forfeiture of the finalist position and any associated prizes.
- HTX reserves the right to disqualify any participant found to be in breach of the rules or engaging in suspicious or unfair behaviour.
Code of Conduct
4. By participating in this challenge, you agree to abide by HTX CTF Code of Conduct:
- Do not engage or attempt to engage in cheating behaviour, such as but not limited to, playing in teams, seeking help from external parties, or sharing your flags and solutions with other participants.
- Do not delete, modify, replace, or break any flags, questions, services, or any components related to the challenge.
- Do not share or disclose any HTX CTF materials—including but not limited to questions, solutions, scripts, binaries, environment details, write-ups, challenge files, service links, or any related content—with anyone or online at any time during the event.
- Do not generate excessive load on or attack the infrastructure.
- Do not share any challenge details including but not limited to challenge descriptions, links to challenge services/endpoints, challenge files, or any other details not specifically listed.
- You are encouraged to document your solutions, thought processes and methodologies used for each challenge. HTX reserves the right to conduct random verification checks, which may require participants to walk through their solutions. Failure to comply with a verification check may result in disqualification.
- If a participant engages in unacceptable behaviour, HTX reserves the right to take appropriate action, up to and including disqualification.
Prizes/Prize Winners
5. All 40 finalists will be entitled to receive a HTX Public Safety Village coin. Finalists who do not attend the onsite finals will not be eligible to collect the coin.
6. HTX may conduct additional verification with potential prize winners to validate their submissions. This may include write-ups, interviews, or other supporting materials. Participants are expected to provide the necessary information if requested.
7. HTX reserves the right to disqualify participants who are unable to pass this verification.
8. HTX's selection of winners is final. Top 3 winners will be announced during the award ceremony on 28 Apr 2026.
9. The prizes are as stated, and are not transferable, redeemable, or exchangeable for any other prize. HTX reserves the right to substitute any prize with another of equivalent value without prior notice.
10. HTX may request proof of identity to verify the winners' identity at any time and may use any channels and methods available to check any details provided. Participants may only enter the challenge in their own name.
Others
Reasons for disqualification
11. HTX may conduct verification checks to ensure participants maintain fair game play according to the rules of this challenge. Participants suspected of violating these rules may be disqualified at HTX's discretion.
Your Contact Details
12. Disclosure
- We may share Your Contact Details with other Government Agencies where appropriate to discharge public functions, unless prohibited by law.
- We will share Your Contact Details with our appointed vendor to onboard you to the competition platform and communicate with you.
13. Protection
- Your Contact Details are stored with HTX and transmitted using appropriate security technologies.
14. Third-Party Links
- This service may link to external websites with different privacy practices. We are not responsible for their content or data protection standards.
15. Request for Access to or Correction of Your Contact Details
- You may request access to or correction of Your Contact Details before the commencement of the competition.
16. Retention
- Your data will be retained by HTX, as necessary, to fulfil competition purposes and comply with legal and administrative requirements.
Publicity
17. Upon entering this challenge, you agree to grant HTX the right to use your name, photograph, and write-ups in any publicity activities related to this challenge, for example, prize awards.
Others
18. HTX reserves the right, at its sole discretion and at any time, to change or modify the terms and conditions of this challenge.
19. HTX reserves the right to withdraw the prizes at any time if HTX suspects participants to be cheating.
20. HTX reserves the right to cancel/halt the challenge or change the challenge format as and when necessary.