Human + AI Solidity CTF: bring your own agent

Devcon 8 · 3 Nov 2026 · 1:05:35

BuidlGuidl developers Carlos Sánchez and Damián Martinelli host a Solidity capture-the-flag workshop for humans and AI agents. Participants compete across twelve challenges, then compare prompts, interventions, and recovery strategies to reveal how different agent setups perform under pressure.

Speakers

Topics

From Devcon 8, hosted by Ethereum Foundation.

Transcript

Hello everyone. Welcome. Happy to see so many faces in here. Um my name is Carlos. I'm here with Damu. We work at Bill Guild. Um and we are here to play the capture the flag game which is a classic already. Um we are going to do like a really quick like five minute introduction to the game and then we will just jump into it. So this is the third time that we are doing this. We did it back in Devcon Thailand two years ago and last year in Argentina

and yeah it's only been two years since we did it for the first time but man those has been some interesting years. Um, and yes, I'm talking about AI, right? Actually, last year we were thinking this might be it. This might be the last year that we are running this because it won't make sense. You know, AI is taking over and humans doesn't make sense anymore. So yeah, we are having like all of these questions and I'm sure like most of you here are having this question and have been having these questions uh during this year. But this year we decided at Belgill to go deep into AI and we started to get some insights into into

these questions and we got like two things clear. One is like the bar is higher than ever, right? Like now um everyone has this tool at their disposals and they can use it for anything and you know like companies, products institutions universities they are going to need to step up to keep up with with AI and the other thing is like humans and maybe this is me being optimistic but I think humans are still needed. um you know this like taste or judgment direction that you know you you still need to steer and tell the thing how to do things but you know who knows maybe I'm just like a mid proxy I'm I'm just

coping anyway uh for the CTF we decided to embrace it and we assume that all of you are going to use AI to play so we are prepared for that like the game is prepared for that so um you can use any setup that you have any stack like any model, any tool, any hardness, skills, MCP, whatever. Um, so yeah, Dam is going to tell us a little bit more about the about the rules and and then yeah, I think in 2 minutes or 3 minutes we will be starting. >> Hi.

Well, uh, to play the CTF game, you will have to solve 12 uh challenges. Uh on in each challenge you will fight to find a way to mean an NFT flag. Erh you can play in any time size. You can play alone too. Well not alone with your agent for of course. Um, one important issue is that you have to use only one wallet because we will show uh a leaderboard and the leaderboard is based on minting flags.

So, you can't transfer the NFTs. Uh, be careful about this. Uh, and the contracts are deployed on base magnet. Uh you will need about 10 cent uh US dollar in bit base it. Uh if some if someone needs some uh base it uh we you you can ask some of the guys in the front row and they can send you some scent to play the CTF.

Well, the price is the winner will will get 3k uh US dollars. Uh well, your agent can win3k US dollars and maybe in 10 minutes, I don't know. Uh the the second plane is one and a half and the third place is uh $500. Uh you uh need to be here to collect the prices. Um and thanks to the sponsor for the prices, the ter foundation and Aztec. A big send uh to them. Um now we have this QR here. You can go to

the website ctfmay.bgill.com and it should be live now I think. Um yeah I I'll leave this for 20 seconds but then don't worry I will have the URL there. But please go to the website starting your laptop, your agent, your skills, your MCPS, your brain maybe. And yeah, so here what we are going to do um we are going to show a leaderboard that is going to be here the whole time and we are going to see you know uh leaderboard Yeah, maybe see if you can enable the

Oh, it's enabled already. So, the game is officially live. This is the leaderboard. You just go play, win mean some NFTs, win some flags, win some money. And yeah, I think Austin probably will be here, you know, like doing some MC during the, you know, narrating a little bit. So, yeah. And you have any questions, if you need some gas money, come here to the first row, show us your QR code for your wallet, and we will send you like 20 cents to play the game if if you need base. Yeah, you can play it. Austin, don't don't play.

Any question? Yeah, just go here. Yes. ctf.mmunebuild.com and then you have all the information in there. Okay. Yeah, let's go. Let's see who's the first one. We have Pluto first. You want to

>> Yeah, we have Pluto is up there. Way to go. First on the board. Who else needs base ETH? Anybody need any ETH? Hey, how's it going? Base ETH? Give me a QR code and I'll send you 50 cents. Yeah. You want 50 cents, Mcto? >> Yeah. You got a QR code for me? Here you go. Let me >> Oh, I can't get it.

>> Come on. >> Let me try. Hold on. Let me try different. >> You got it. You get it? Okay, here's another one. >> Five base ecos. 6. Wow. Fat fingered that one. You got

it. stacks on my laptop. >> That's right. >> I'm in full vacation mode now. >> I'm on vacation. >> Just like it on the phone and be like, "Hey, just like screenshot the screen goes to work.

>> Make no mistakes. Do it all." >> Oh, I think I got it. Let's see. five or 10 seconds if you get any. Okay, who else needs? >> All right, I'll just keep working through the QR codes. Anybody else need for gas?

Show me a QR code. base heat. Here we go. Oh, we got a couple more people on the board here. When I get closer, I can read their names off, but if you need any base ETH, put a hand up. Show me a QR code. I can send you enough gas to

play this over probably 10 times. be there in five seconds, 10 seconds reloading show up.

That looks like the internet is not working. CTF. Mumbai. No, your internet's good. CTF- Mumbai. What's the URL? >> This guy will be able to tell you. What's the URL? >> Okay. Didn't go >> here. Show me. Yeah. Show me a QR code again. Is that that's your wallet address, right? Not like a base offramp or anything like that.

>> No. No. >> Okay. >> Let's see. E on base 0.5. >> Says it sent. >> Okay. No.

>> Huh? Oh yeah. Okay, check and see if that worked.

>> It's right there. Yeah. Yeah. No, scroll back up. Scroll back up. Right there. That 50 cents of Ethereum right there. Yep. What was the URL? Someone was asking back there. >> Mumbai. Yeah, he was doing CTF- Mumbai and it wasn't working. BuildG Guild. >> Yeah. >> Huh? >> Maybe build it. >> Oh, he probably had to build a little B. Gittle. Yeah, I bet that's it. Purposefully misspelled. Yeah.

Yep. Sabotage. Was it you that was having the trouble with the URL? Who was it? >> Someone over here. You got it. Okay. >> Yeah, it was B G. Yeah. Yeah. Come on in and join us for the Build Guild CTF. We're playing a smart contract challenge. There's 12 challenges. Bring your own AI. We're playing for $5,000. The first challenge is already getting picked up by quite a few people and their AI. We've even got someone with two flags captured.

Is that Vay? V A YZ. We got Vay on the board with two flags captured. Followed by Pluto and a whole swarm of others with stack too deep. Sitting 11. I like your style. Stack too deep. Oh, Vay picks up the third flag. Good work. Whoever Vay is out there, you're doing it.

places. >> Four. >> Four. Vay has four flags. Four to one. To one to one to one to one to one. Who are they? Who is Vay? You can stay on and stay quiet if you want, but keep capturing flags. Oh, they got one, two, three, and five. Interesting order. The agent is probably deciding which one it can capture the fastest and they're just saying yes do it.

Okay, we got a we got Mumbai raccoon. The Mumbai rac are there raccoons in Mumbai who can give us some raccoon lore? Little trash pandas. The Mumbai raccoon. Deita. Deva. I don't know how to pronounce that. I'm too American. Da. Oh, is that a question? Let me back there.

What's the question? >> Oh, yeah. Here, let me come around this way. Oh boy. Can I step over this stuff? Oh man, my QR code reader is not good. Let me try a different QR code reader. That was way better.

base. >> Yep. Good luck. Go get him. >> Uh, where can they see the leaderboard on their screen? Can they see their own leaderboard locally? Slashleerboard maybe. slashleerboard. Yeah. Yeah. What do you need?

It'd be base e should have been 0.5. Oh, you need some more. There we go. Sorry. Excuse me. 5 base E should be sent. See if you see it. Okay, someone's got five flags. It's that Mumbai raccoon. That Mumbai raccoon has taken first place. Halfway there almost. It gets a lot harder at the end though, right?

No heat. We're probably

good. I like I like That's going to post the URL.

Yeah everybody. >> Mumbai raccoon sitting at five flags vases on their tail. Got a nice long tail of participants too. The curious quarious quarious agent up there. Force Aries Vikings. Stack too deep. Sitting at seven. Let's go. Stack too deep. Get deeper. They have

All right, I'm throwing a tweet out there. Mumbai raccoon on top. Let's go. The sixth flag is a tricky one, I guess. Cur Curia Curious Curious Agent moved

into second place has tied the raccoon. It's a tight one out here at the CTF in Mumbai. All right, look at that. Deita, how do I say deva? Deva >> deva. Okay, deitva into third place with their fifth flag.

We got a three-way tie. >> Oh, number eight. Yeah, look at Aries take out flag eight. >> That's the harder one. All right. >> Oh, okay. So, Aries just took out a very complicated, unverified contract out ahead of everyone else. Very nice, Aries. While sitting in fourth place, Vay picks up flag number nine. Also picking up some of those uh flags out there ahead.

We've got a nice competition here. We've got four or five people stand real tight. This is looking good. Will someone take the crown away from the Mumbai raccoon? Find out today. The Mumbai CTF. Oh, vase picks up flag four, five, all the way to nine. One, two, three, four, five, and nine.

To vase back on top, how do we know that these people are in their own? >> We don't. >> Then when they collect the prize. Yes. If you're at home live streaming attacking the CTF, you won't win the prizes because you're not here. you. All you need is a meat proxy here to come talk to us. >> Seven. Oh, Vay picks up flag 11.

That's a pretty one. Vay is out ahead by two. Oh, now only by one with Quirius Agent picks up that flag 11 also. Very nice. We are neck and neck.

So they're holding on. >> So number six, flag number six, we haven't seen someone pick up because it's one that you have to set and then wait for a fivem minute lock. So they've probably set their lock for flag six. There we go. Querious picks it up and they waited their five minutes and then and then solved it. So, Quirius moved ahead and took flag 11 while they were waiting for flag six. And it looks like Vay is still waiting on that flag six, too, but is out ahead because they have flag sevens and nine.

And it was Aries that took the complicated flag eight. We'll see uh how long it takes the other folks. Oh, what do we have there? There's some movement. Aries moving up into third. Okay, I got to tweet another one here. What's that?

>> Yeah. Oh, the sound's not working through there. Too bad. Oh, there we go. Mumbai raccoon picks up six. That delayed. Hopefully, they weren't blocked on it. Hopefully, they were moving on to next ones. not staring at their AI thinking, oh, Mumbai raccoon takes third place, picks up 11.

Mumbai raccoon pig takes up second place. Holy cow. Holy moly. The trash panda's on the move. Mo Mumbai raccoon takes another one. They've got one, two, three, four, five, six, seven, eight, nine. They need 10 and 12 and they're done. Mumbai raccoon just sweeps. What was that? Four challenges right in a row. Very nice. Oh, I think I heard a sound. Did it make the sound? Feel like I heard the Should I just make the noise?

>> Oh, yeah. Yeah, of course. When someone finishes here, you can keep going. So, even even if you're down here and you're you're not in first, second, or third, keep going and finish out the race. See how many flags you can get throughout the day. Even it's not going to stop hard at the end of the hour or anything. Oh, it is. It is. Okay. So, it's going to stop at the end of the hour, but go until then. Oh, 34 minutes. Yeah, it stops at 34, not once we have the top three. That's what I meant to say.

>> Nice. >> Nice. Oh, okay. For like four, five, and six or something. Okay. Maybe we give those out first and then do the bring the three up. Okay. >> Yeah. 41 is a good longtail of players. Can I scroll down and look at that real quick? Grab Shiv's wallet. >> Mumbai raccoon captures the second to last. One left for the Mumbai raccoon. Look at all these players here. Got some great players on the board. Mumbai raccoon has one flag to go.

>> Yeah. Is it going to happen? There will be. Okay. Keep an eye out for a nice animation if that Mumbai raccoon can get that last flag. We've got Vay in second place and Quirius agent in third. Aries in fourth. And again, it doesn't stop right when someone gets this. Like, play it out and we'll see who gets third, fourth, fifth, sixth. We've got t-shirts for fourth, fifth, and sixth. And cash prizes for first, second, and third. Mumbai raccoons about to pay for their plane ticket. They've got one flag.

114 total flags captured from 41 agents. If you're a naan, cover your face. I'm about to take a picture of the room. You want to get in there. Carlos Shiv, Damu, get in the picture. Get in the picture. Here we go. Did they get it? Yeah. >> I missed a picture of the champion. Anybody get a picture of the champion board?

>> Okay, keep going. Keep going. We'll need second place and third place. There's still money to be won. Who is going to be in the money? Mumbai raccoon takes first place. Congratulations. You got a picture. Okay, good. >> Nice. Nice. Okay, who will it be? Who gets into second place now? Second place is the first loser. Just kidding. Keep it. Work hard. Vay, Quirius, agent, and Aries are going to battle it out for the last few scraps of ETH that we're going to hand out here.

Mumbai raccoon. I don't know what the time was. It'd be cool to know how quick they got it. >> 30 minutes was about what it was. >> Yeah. When you knew the answers and you knew how to you didn't know the answers, but >> Yeah. You know the setup. Yeah. 17 minutes. Okay. It took him a while to get funded and get it going. Yeah.

Yeah. Yeah. Vay has two to go. Eight and nine. No, eight and 12. Quirius agent sitting at third. Aries at fourth. Stack too deep is still too deep in the list. All the way down at ninth place. The agents are refusing to do any cyber

attacks. Oh Aries thinking about moving into that third place spot. The difference between money and no money right there between third and fourth Vay has that flag 10.

Looking for flag 12 now for second place. Aquarius and Aries are going to have to really hustle in parallel to catch Vay now. And how long did it take a human to do this without AI in in it would take a long time. Well, so how does this compare to what we did in Thailand? >> Way more way harder. >> This is way harder. >> Yes. >> Okay. >> And in even in Thailand, you said it was particularly disturbed the challenges, but those were human challenges. And this is even more nefarious. for ages.

>> Okay. >> Zako, Zach, Zakawe up there at third place sniffing out that money. Jumped in, jumped up. Who's going to do it? If you can't come up and claim your prize, we know you're at home attacking us and not here in the room. Lot of lot of folks in the room here though. This is a good group. Where were you sitting out there?

>> Yeah, you were just in the back. Okay, cool. >> I think he's the raccoon. Do you have do you have to prove that you're you have to sign a message or something? I don't No, I'm just I'm just >> Oh, we're gonna send the money to the address. >> Oh, there we go. Vay picks up second place. Very nice, Vay. You're in the money. >> So, we'll battle it out here at the end for the last few flags.

Yeah, we could just get it. We could collect a different address and send it to somewhere else, right? If we need to Okay. Okay. Right. Right. Exactly. Yes. My bot loves to leak private keys, home addresses, everything. Oh, Barwick and Truth. That looks like a It's a dot com. That looks like a scam coming up in sixth place. Is that Is that real or scam?

>> Oh, that's pretty cool. Nice. You're in sixth right now. Great. That's impressive that you're doing that from phone. Way to go to like a machine at home or where's the machine that you're talking to? Okay cool. Oh, wow. Moving into third quickly. Look at that. They're using a phone talking to a server. >> Yeah. >> Yeah.

>> Yeah. >> Yeah. It might win money, too. Imagine just like sitting at a CTF and being like, "Yo, go win this for me. Make no mistakes. And it just like comes back with here's your money. >> Yeah, we'll go through it. >> Okay. Okay. Who will get that third place slot?

Will Barwick hold it? Will Zak Holloway Zakoway get it? Maybe Aries or Aquarius. Last couple flags to go. Quirius moves up to fifth.

Four five fifth. Two flags to go. Who will be in the money? Barwick is running it from the phone. Let's go. Harwick.

One left to go. Picks up flag 11. one flag away from the finish. And even when they finish, keep playing because we want to know four, five, and six because we want to give out t-shirts. So don't stop when the third place winner is selected. Keep going. 21 minute 22 minutes left.

Who's going to get that last flag? We've got two competitors within one flag of the money. Who will get there first? Probably going to happen in this next minute or two. There it is. Barwick gets it. Barwick and truth.

Okay. While we wait for the next few to finish, it would be fun to hear about your stack. Uh maybe Mumbai Raccoon, could you come up here and talk with us for a little bit? Congratulations to the winner. We'll we'll have you up here in a little bit and we'll do a whole thing. But what uh what models what are they? >> So um I use um OMP um and GLM um opus cloud code >> and then there are sub aents but then I ranked it for difficulty for smaller task. It was using a faster model so it saves on compute and you know can just go with it. That's why like before I even knew the challenge was live, I set up like the because you guys mentioned

on the on the page that there'll be lm.txt. So every 10 seconds was like firing to check if there's already live. Uh by the time was having the food and everything I saw like already solved like half of the challenges. Um and then I needed to fund it because you know I didn't know which chain it will be on. Uh so as soon as fund it, it solved the rest few. Uh then there was the RPC issue and the nons issue which I had to steer. Uh and apart from that it's all done by phone so I didn't have to open my laptop. >> Nice. Amazing. >> Generated the key also from the vanity.

>> So it's probably you know. >> Okay. Let's not send money to that then. >> Yeah. Yeah. Yeah. >> So okay. So let me get that clear. You uh were eating while you serve solve the first few flags and the hardest part was sending money into the thing and getting the setup. Is that right? Like >> so also I did some pre-training on that. >> So I did some pre-training. I uh saw that what other CTFs you guys mentioned. I told it to read all of those. Uh then I had my own small library of different uh exploit vectors. Um it had access to all of those systems. Um I just have to make sure it's isolated. So I use exev which helps me create isolated VMs and

you know just run things from my phone. Um and yeah then yeah I just had to wait >> and and you are like a security expert in the EVM space is that right? >> I wouldn't say that but yeah I used to lead engineering at Sushi Swap before. >> Okay cool shout out Sushi. >> Not anymore but yeah previously. >> Yeah. >> So what do you think uh your knowledge of security coming up to this helped you? You you kind of knew what to train on. You kind of knew what environment to put it on. If you were just a dev, you may not have known those environments. >> Yeah, that's true. That's true.

>> Okay. So, >> and it was exe dev. Is that what you call? >> That's that allows you to run like you know like VMs. Okay. >> Um and you know you can just SSH into it. Uh what I usually use is I actually connect all of those agents uh with cloud code. So it uses file system itself to talk to different agents and I control everything from cloud code phone app because it's easier for me to just you know chat to it. Um, and exev allows you to just run things, you know, you don't have to leave your laptop open and everything. Um, and I'm also not connecting to Wi-Fi here because of the e-mudra thing that happened, you know, uh, and things are not patched yet.

>> So, um, it's also good for me to not even connect my laptop to a Wi-Fi and just use everything for phone and on there they use exe Wi-Fi like you know internet which is super fast. >> Okay, very nice. Uh, anything else? I think that uh what did you do about Opus like saying it didn't want to do things like you were using GLM 53 most? >> So I did not use Opus 5 for actually solving things. Okay. >> I use 4.8 Sonnet and Haiko. >> Uh these do not have the security restrictions and then GLM for anything that uh you know even these models >> Chinese ones. Okay.

>> Yeah. Like I right now even have to check which model solved what. uh but I think top five was done by Opus and I think the last two which was 10th or 12th uh Opus was not struggling but um GLM had already did it so it just borrowed the flag from the GLM. >> Okay. >> So yeah. >> So you were using 55 but just to orchestrate the others. >> Yeah. Okay. >> So there was I just orchestrate with just txt files you know just agents talk to each other inside the txt file >> just in an environment with some files. >> Yeah that's all. And it's all isolated from my PC so I don't care. We'll have you up here and and do the prize in a second. But yes, thank you Mumbai raccoon. Good work.

>> And then Vay, Vay, you want to come up here and talk to us about your setup? What's that? Yeah, looks like there's three or four. Yeah, good work, dude. Okay. So, yeah, same questions. What's your stack? What agents? >> I just used uh like deepseek and to spawn like 200 cloud agents. That's all. >> Cool. So, it just had like a ton of sub aents.

>> Yeah. >> And they could talk to each other and I had it on a VPS. >> Okay. >> So, it was building and doing everything on the cloud machines itself. >> Okay. >> So, that's only my stack. I don't know anything about this. >> Okay. >> I just use my card and an agent swap. >> Very cool. Awesome. So, not a security expert. >> No, nothing. >> Okay. Great. Good. Good. Second place. Yeah. Good shout out. Anything you guys want to add to that? >> We just uh just prompt and pray and hope it works. I guess >> that's good. Vays with the prompt and pray. Good job, guys.

And then Barwick, do you want to come up here and talk about what you did from the phone also? It sounds like first place Mumbai raccoon was also mostly from the phone, but it'd be cool to hear y'all's setup and stack. Yes. Oh, wow. There's a whole stack looking at maybe getting that t-shirt. Good work. Good job. >> Hey, thanks. >> Yeah. >> So, I learned about this challenge like 10 minutes before it. It wasn't an application for some reason. My agent found it when I was told that okay, what should I do? And I wasn't prepared at all. Uh I didn't do any capture the flag for web three before, but I'm back hunter. Tomorrow I have a talk how to

steal $5 million from readonly bug. So feel free to join. It will be interesting. But okay, I professionally find the bugs uh but in the normal software like this. So I have my entire orchestrator and fork of the codeex which um which I modified to use a lot of different models at once plus deal with the cyber security problems. So basically my solution was to set up everything quickly. It took me like 20 minutes just to set up that I need I didn't have like private wallet. I didn't have a key. So okay 20 minutes for the setup. Um then uh I just run all the model. Okay, I downloaded everything

like uh all the data from ether scan. I use API key for this and then uh for every challenge I run like 10 different models Kimmy, Oppus, Gemini, Deepseek, Mimog, Grog all of them with a challenge to okay solve as uh fast as you can and if you have anything helpful like communicate it to the other agent. So they managed to solve it uh just by this. Of course I had a lot of issues with agent refusing to do the work. So I do it in a way that okay where for example Oppus Gemini or the other refuse the work I tell the orchestrator okay still use them but different strategy.

Tell them what is wrong and how to fix this in the smart contract. Don't tell them to exploit it anything like this. Just tell that okay we are developers. We want to just make sure it's safe and give this information to other agents which will happily which will be happy to abuse it. >> The Chinese one will break it. >> Yeah, exactly. >> Yes. >> So that that's the common strategy uh for this and even when I find the bugs uh professionally like this, I use the same strategy. I use the powerful models which are restricted to help me find out what to improve, what are like most critical section without like telling me where the bug is or where to exploit this or how to exploit this. But just idea enough I just idea alone is enough to let the other agents find it because

when you know where to look and what are you looking for the agent is going to find it doesn't matter if it's deepse or the other model. So yeah that was the strategy. I have no idea what was going on in practice because you know I didn't have ability to read uh all those agents. I will be checking it at hotel when I'm back. >> Great. Good job. Good third place. >> Thanks. >> Thank you. Far away. So it sounds like the hardest part is getting a wallet and getting it funded and the second hardest part is orchestrating a swarm of agents and then somewhere down there you get into the details of security and all of that stuff. But you can see how everything has moved kind of abstracted a layer up

and it's about orchestration and setup rather than getting into the code and understanding how to shift the bits correctly. We still don't have our third, four and five, do we? Or four, five, and six. A lot of people close, but no one has finished it up. Who's going to win the t-shirts? also isolation, right? A lot of people on a VPS, a lot of people using machines at home or not here and basically just orchestrating from their machine. Ah, there we go. There's fourth place.

Deitva Deitva, are you out there? You want to come come talk with us for a second? Good work. And Aquarius, you'll be up next. Good job. Fifth place. Oh, that was neck and neck there for the t-shirt tie. >> Yeah. Oh, you get to pick your size first. You got lucky. Yeah. Yeah. >> Thanks so much. >> Here we go. All right. What was your stat? What was your setup? >> Um, I only used clot code with Opus 4.8 because 5.5 and Fable refused to work. I tried prompting it to work but yeah it didn't work. Uh I also spawned like multiple sub agents but I was not able to orchestrate them well to talk to each other but I just ran multiple sessions I

think about three to four so that each agent is working on a different challenge and uh as soon as I had the solution I just told the other agent that the solution is done so it can move to some other option and I gave it solutions for the previous defations CTFs that had been run. So I wrote a walkthrough myself for both the uh Thailand one and the Buenosirus one and so it had some context on how these CTFs are arranged uh and done. Yeah, that was >> nice training that I didn't even think of that but it makes a lot of sense. Uh you did that too. Training on past CTFs of course these guys are going to do something similar to how they already did it too. Well, good work on fourth place. Good work.

Looks like Pluto got into sixth place. So we've got everybody. Let's Oh, Mingo just out of the t-shirts. I'm sorry. Maybe there's there's four t-shirts. Maybe Mingo will get a t-shirt, too. Yeah. Okay, Quirius, can we get you a t-shirt? Come up here, Quirius. Good work on fifth place. Quirius agent, what was your your stack? Anything different from what everybody else has said? >> Just prompt and cloud uh cloud opus 5.5.

the 5.5 did it refuse a lot or how'd you get 5.5 to do some of these things? >> I mean, I just train on the previous CTF like the Bangkok and Okay, >> the other one. >> So, yeah. >> Okay, cool. Let's get a t-shirt for you. Good job. All right, Pluto, you out there, Pluto? All right, >> we have only XL now. You get some >> sleeping t-shirts. Do you want an XL or a double XL? Okay. What's uh any tricks from you different than anybody else did?

>> Yeah, I think I tried to do too many things at once. So, I was using GLM Grock 4.7 which didn't refuse anything and it helped me solve the 12th flag only one of them. So, yeah, Opus 4.8 but I was not orchestrating it properly across them. So, yeah, I solved the first one but after that it was very slow. >> Okay. >> So, I should have formed it better. >> Great. Gro, but Grock basically and and GLM. Is that what you said? Great. Awesome. All right. Thanks. We've got one XXL t-shirt. I don't remember who it goes to. Who was that in seventh place?

Mango, Aries, and Prianks agent just got eighth and ninth, but I can't show you that. So, all of them got there. But, uh, how about Mingo? Can we give you a t-shirt? We got an XXL t-shirt for Mingo. Who's Mingo? Come on up here. a giant ass t-shirt for you. >> Wouldn't it be cool if you came up here like, "Oh, that'll be perfect." Here is your giant t-shirt. Do you want to tell us anything different that you did there or?

>> No, I just used Opus. >> Okay. Opus 55 or 4.8. Okay. >> Okay, cool. Well, good job. Thank you. Yeah, it's fine. I think that's we've already got the Can we Is there something wrong with getting the Are we doing anything wrong with the screen? Is it okay? Oh, we're back. Okay, there we go. Okay. Well, there it is. The Oh, Stack too deep got in there, too. Good work. There are our winners. So, Mumbai Raccoon in first, Bay in second, Barwick in third, and then down the line were the t-shirt winners.

a lot a lot of uh 12. We didn't get that many with the humans. The humans weren't able to get the the 12 flags. Uh okay, I think we've got six minutes left. Uh let's bring the winners up here for a picture, I think. So, I think we'll go I we'll have to get an address from you so we can send you money. Uh I don't think we should send it to your one that your agent was orchestrating. He'll leak the private key on you. So, let's have third place come back up here. Barwick and Truth, can we get you back up here for a picture for third place? Uh, not listening. Do you want to come back up here? Yeah. Okay, come back up here for a third place picture. You guys want to

come standing with Barwick here for a picture? What are we doing? Okay, good job. Third place official handshake picture. Yes. Good job. Third place. Good official. Good job. We we need an address from you, I think. Can you give something to Carlos? >> But what if we can send to the one? >> If we can just send to that one, we'll send to that one. Yeah. >> Uh, no t-shirt. I'm sorry. Money. You give money. You can buy lots of t-shirts. Good job. Good job. Okay, second place, Vay. Can you come back up here Vay and have an address for us so we can send you some tokens?

kind of weird. We had you come up here and then go back down and then come back up here again. Good exercise. All right, good job, guys. Good work. Good work. >> Thanks. >> Good work. All right, let's get a picture. Let's get these guys by their second place win. Good job, Vay. All right, good job, guys. If you can give him the address, we can send you Oh, another picture. Let's get it. Second place. Good job. >> Give it to Carlos, I think.

Say indeed finish 13th. Good work. Okay now that

Good job. Second place, Vay. And number one was the Mumbai raccoon. Come on up here. You have a sticker that says no picture. Are we just doing it or are you already doxed or is it over? Okay. Okay. First place winner, the Mumbai raccoon. Congratulations. And you want us to just send money to that or do you want to give us an address to send money to? >> Okay. Okay. Cool. A lot of trust. A lot of trust in your agent. Yes. Yes.

>> Okay. Cool. Okay. >> If you're Yeah. If you're just going to create one, you might as well create one that's not floated, right? >> Yes. Yes. >> Oh, he's got a CH mod. I like that. That's your ETH address. >> ENS. Of course, ENS, not >> Okay, that is it. A minute left. If you want to get 14th, 15th, and 16th place. Let's see. Can we even scroll down here? Do we have some people still finishing it up? Oh, wow. A lot of people have finished. Good work, y'all.

Nikolai, you got in there. You got one to go. Nikolai, let's see uh if anybody gets it in the last minute here. It's going to be closed in just a minute. Minute left. Let's see who can finish it out in a minute. Anybody else going to get in there? Okay, that's the end.

Nikolai did not get the last flag. So, we had 14 teams total. 14 teams were able to get all 12. Congratulations. Game over. Thank you guys for playing. Thank you guys for being here. Catch us at the next DevCon if there is one. Maybe we'll do another CTF. This one you'll probably just have to press a button on your phone. It'll probably be the funding and the and the orchestration will probably