Everything the market says, decoded and dated. Onion addresses are never guesses. Independent — no affiliation, no accounts, no affiliate links.
http://drughuberjxfrxtlk2cystdz4jvogmc3lsnk5drvwx2nfi63ou2r2kid.onion/
The staff posts roughly every 2–3 days: phishing waves, DDoS adjustments, policy changes, tool releases. This desk translates each PGP-signed post into plain language, notes what it changes for you, and keeps the checksum-verified onion one click away.
Logged-in users see current public mirror latency, latest PoW difficulty and queue estimates before hitting a mirror.
What it changes: Slow does not mean dead. Check the dashboard before switching circuits in frustration.
Orders above 0.8 XMR offer an optional 2-of-3 style review window for the first 12 hours after an order is marked shipped.
What it changes: Big orders are no longer purely trust-the-vendor in the first half-day. Opt in when it matters.
The market keeps covering standard Monero network fees for withdrawals under 0.05 XMR; larger ones show a disclosed deduction at request time.
What it changes: Read the fee line before confirming any withdrawal over 0.05 XMR.
Impersonators DM users claiming to be support or mirror admins. Staff never initiate contact on Session, Telegram or Dread.
What it changes: Anyone who messages you first claiming to be staff is hostile by definition.
Transparent E2EE reverse-proxy tools updated: better Tails 6.x support, faster key import, loud failure modes. Signed releases in the market files section.
What it changes: Hand-encrypting addresses is error-prone; the helper does it transparently — and 1.4 fails loudly.
A significant increase in cloned login pages. After decrypting the PGP challenge, your personal sign-in message must appear in the top navigation bar.
What it changes: Missing, blank or different message = phishing. Close the tab. Make the check a reflex.
New private nodes. Buyers with 8+ completed orders in 60 days, clean history and an active PGP key can request one via automated support.
What it changes: Qualify and you stop competing with DDoS traffic entirely. Vendors still get two automatically.
Postal addresses, tracking numbers and PII must be PGP-encrypted before sending. Plaintext tracking costs vendors the listing; plaintext addresses risk cancellation.
What it changes: “For speed” is no longer a defence. Use the helpers or do it manually.