LakeCTF
LakeCTF is a jeopardy-style security hacking contest organized by the polygl0ts CTF team (plus some friends!) and the EPFL School of Computer and Communication Sciences (IC).
Participants first compete in an online qualification round, and the qualified teams will physically compete in the finals in Lausanne. The top teams will have the unique chance to meet the top members of the EPFL research community.
We wish you the best of luck !
SPECIAL: Insomni'hack qualifiers combined
This year's edition is special, as the LakeCTF qualifications will
be valid for both the LakeCTF finals and Insomni'hack finals.
The top 10 academic teams of LakeCTF quals will be invited to
LakeCTF finals at EPFL in Lausanne - more details in this page.
The top 3 professional teams will have sponsored accomodation
and tickets for the Insomni'hack conference in March 10-15th. Teams at places 4-6
will have tickets paid for the Insomni'hack conference.
All the rest of the information in this page will only be relevant
to LakeCTF quals/finals!
Quals schedule
| Qualification start | Sat 7th of December, 18:00 UTC |
| Qualification end | Sun 8th of December, 18:00 UTC |
Finals schedule
Finals will take place in the start of May 2025 in Lausanne.
Accomodation in Lausanne for finalist teams will be covered.
Travel will be partially covered (Up to 2k CHF (~2,210 USD) per team will be reimbursed)
The exact schedule is TBD and will be published soon.
Locations
| CTF Finals | INM 065 at EPFL |
| Hotels | Ibis Styles Lausanne Center Moxy Hotel |
Contact
- Our primary method of communication for the CTF will be the official competition Discord.
Sponsors
Asymmetric Research (AR) is a Web3 security and infrastructure provider dedicated to safeguarding Layer 1 blockchains and DeFi protocols. Focused on enabling secure innovation through long-term partnerships, AR acts as a core contributor, delivering tailored security solutions and critical infrastructure to clients. Recognized as a high-trust partner, AR empowers founders and project leaders to navigate the complexities of the blockchain when the stakes could not be higher.
OtterSec is a blockchain security company focused on identifying and patching critical exploits before our clients go to market. Our team consists largely of CTF players that enjoy solving difficult problems. If you think you are a good fit, please apply through our careers page below.
Orange Cyberdefense is the expert cybersecurity business unit of the Orange Group,
providing consulting, solutions and services to organizations around the globe.
We believe strongly that technology alone is not a solution. We help our customers
achieve superior security outcomes via our 3000+ security professionals, partnerships
with top-tier vendors, threat intelligence and in-house R&D including a CERT and
Epidemiology Lab.
Orange Cyberdefense Switzerland is born from the acquisition in 2022 of SCRT and Telsys:
two long-standing players in the Swiss cybersecurity landscape. By combining the expertise
of the Swiss-based team (120+ people) with the support of the broader Orange Cyberdefense
group, we can offer a global protection combined with local expertise and support to our
Swiss-based customers.
Orange Cyberdefense Switzerland (previously SCRT) are also the founders and organizers of
the Insomni’hack cybersecurity conference and hacking contest, which grew from a small
CTF in 2008 to a major cybersecurity event in Europe nowadays.
Infomaniak is a Swiss cloud provider that develops a suite of online
collaborative tools and solutions for cloud hosting, streaming, marketing
and events. Our mission is to develop technological independence in
Europe with ethical cloud solutions that make no compromises on ecology and privacy.
The company uses exclusively local renewable energy, builds its own data
centers and develops its solutions in Switzerland, without relocating.
With millions of users and the trust of public and private organizations
all over Europe -including RTBF, the United Nations, central banks, over
3,000 radio and TV stations, and numerous metropolises and security organisations,
it was awarded the Prix Suisse de l'Ethique 2023 and the Prix du développement
durable 2023 by the canton of Geneva for its new data center, which fully
recycle the energy it consumes to heat up to 6,000 households.
- Website
- Bug bounty Program
- Check out our open positions (feel free to send unsolicited applications)
Zellic is a security research firm. We hire top CTF talent to solve the world's most critical
security problems. We specialize in ZKPs, cryptography, web app security, smart contracts, and
blockchain L1/L2s. Before Zellic, we previously founded perfect blue, the #1 CTF team in 2020 and 2021.
As part of a comprehensive compensation package, we offer competitive salaries and benefits.
You're a good fit for Zellic if you have extensive real-world experience in vulnerability
research (VR) / binary exploitation, reverse engineering (RE), cryptography, or web security.
To learn more about Zellic, check out our blog
Work at Zellic: |
zellic.io/careers |
@gf_256
Meet the founders:
ChainSecurity is among the oldest and most trusted smart contract audit companies.
Our team conducts smart contract audits since 2017 and we are trusted by long-term
partners, such as MakerDAO, Circle, Curve, Lido, TRON, Compound, Yearn, 1inch, Tether,
Argent, the Ethereum Foundation, Uniswap and many others.
In addition to our history of responsible vulnerability disclosures, in the Ethereum
protocol itself and in live smart contract code, we have a history of developing new
security tools and discovering new types of vulnerabilities.
To learn more about us, check out:
Rules
- There is no limit on the number of people who may participate in a single team in the quals. All participants of a team should only use one team account.
- Up to 10 academic teams will be allowed to the LakeCTF finals. The finals will take place physically in Lausanne at EPFL. Only 8 players per team will be allowed to play the finals. Remote players are not allowed.
- Up to 6 professional teams will be awarded prizes for Insomni'hack (accomodation or conference tickets). Insomni'hack will take place in March 10-15th.
- Sharing flags or solutions during the contest is strictly prohibited. This action is subject to disqualification.
- Attacking machines other than those designated as LakeCTF 2025 target machines is prohibited.
- If you find a bug in the contest infrastructure, congratulations (but you should report it).
- EPFL students/staff can take part in the quals but are not allowed to qualify for the finals.
- If you are not sure if something is a violation of the rules, it probably is.
LakeCTF Prizes
All teams that qualify for the finals will have accommodation paid by EPFL. Furthermore, the top scoring teams will receive (for each member):
| 🥇 First place | TBD |
| 🥈 Second place | TBD |
| 🥉 Third place | TBD |
Bonus rewards:
| Best 5 writeups | TBD |
All finalist teams will receive a bag of EPFL and polygl0ts merch.
About
LakeCTF's first edition took place on the special occasion of the 20 years anniversary of the IC School (Computer and Communication Sciences) in 2022. Due to its great success, we are organizing the third edition of LakeCTF with online qualifiers in fall 2024 and finals on EPFL's campus in Lausanne in spring 2025.
In collaboration with the IC School, accommodation, a tour of Lausanne, lunch and dinner are provided for the finals.
polygl0ts is the official EPFL CTF team. It was born in 2018 and is still going strong, taking part in major CTFs as part of the bigger organizers team, one of the top team on CTFtime.
