This increase may be due in part to the closures of top DNMs, the shift to the exclusive acceptance of XMR by other active markets, and delistings of XMR by popular centralized exchanges. The below graph shows an increase in Abacus sales (in BTC) following the closure of ASAP Market in July 2023, and a further increase following some CEXs delisting XMR. While Mega’s inflows declined by more than 50% year-over-year (YoY), Kraken DNM’s rose nearly 68% YoY. Kraken DNM, which billed itself as Hydra’s Market’s successor, received $737 million on-chain in 2024. Blacksprut, which rose to prominence with Mega in the wake of Hydra’s 2022 sanctions designation, law enforcement seizure, and subsequent collapse, came in third with 13.6% less revenue YoY. Crystal’s 2025 report highlights why Fridays have become the riskiest day in crypto, analyzing hacks, scams, and DeFi fraud.
The cryptocurrency space remains vulnerable to scams that exploit investor trust and security weaknesses. Fraudulent ICOs, rug pulls, and phishing attacks deceive users through false promotions and impersonation tactics. These threats highlight the need for stronger security measures, regulatory oversight, and increasing user awareness. In the first arc of the anime series Lupin the 3rd Part V, Lupin III steals digital currency from the “Marco Polo” darknet market. For a local machine configuration, he recommends a computer purchased for cash running Linux, using a local Tor transparent proxy.
This model allows even low-skilled cybercriminals to launch ransomware attacks by purchasing or renting malware from experienced developers. A report from the Cybersecurity and Infrastructure Security Agency (CISA) indicates that ransomware attacks have increased by 150% since 2020. Lin’s undoing came in May 2024, when he was arrested while transiting through New York’s JFK Airport.
JLR Begins Phased Restart Of Operations After Cyber-Attack
We showed that a small fraction of traders is responsible for a large fraction of the trading volume, and by analysing the networks of buyers and sellers, we found different resilience regimes. Shocks tend to induce serious structural changes in the multiseller network, but impact the multibuyer network much less severely. Interestingly, the S2S network shows an intermediate level of resilience, which suggests that the S2S network might play the role of a supply chain network on the dark web.
It received $43.3 million in on-chain transactions in 2024, becoming the highest-earning market on the darkweb. These markets have also improved their user interfaces, making navigation and product discovery more intuitive. The use of Tor and other privacy-focused tools ensures that users can access these platforms without compromising their anonymity.
- The combination of technological advancements and user-centric design positions these markets as a reliable and secure option for drug trade in 2025.
- The best month for the darkweb market was this June, when the value of brokered sales peaked at $6.3 million.
- For example, some illicit actors primarily operate off-chain, but move funds on-chain for laundering.
- The recent downtime of Black Ops Darknet Market highlights the volatile nature of these platforms, where operational security (OPSEC) and infrastructure resilience are constantly tested.
- Administrators and sellers on dark web marketplaces had a better 2023 than the previous year, pulling in an estimated $1.7bn in cryptocurrency-based revenues, according to new Chainalysis data.
- Previous analyses of U2U trading relationships around DWMs include only two studies21,22 based on unstructured21 or semi-structured22 interviews of 17 users of Silk Road and 13 sellers on various DWMs, respectively.
Fraud And Hacking Services
In the interim, many in the DNM community will assume the marketplace performed an exit scam and continue their activity on other platforms. Bayonet/GraveSac, and has become the preferred method for disrupting the ecosystem. While law enforcement typically continues to target the largest darknet marketplaces like Archetyp, it has moved away from multi-DNM takedowns such as 2014’s Operation Onymous.

Darknet Marketplaces Around The World
Darknet markets provide a secure platform for trading various goods, including pharmaceuticals and digital products, using cryptocurrencies like Bitcoin. Popular darknet market lists and links help users navigate the best options, ensuring access to verified darknet sites and marketplaces. The darknet drug market continues to grow, with 2025 projections indicating expanded availability and improved user experience. Darknet magazines and forums provide updates on new markets, onion addresses, and URLs, facilitating seamless transactions.
The use of cryptocurrencies like Bitcoin and Monero remains central to the darknet ecosystem, providing anonymity and reducing the risk of financial tracking. Additionally, the rise of decentralized marketplaces minimizes the risk of shutdowns, offering users a more stable environment for trade. As the demand for darknet drug trade grows, these markets are expected to continue improving their infrastructure, offering users even greater levels of privacy and efficiency. The combination of technological advancements and user-centric features positions these platforms as the leading choices for secure and reliable drug trade in 2025. These markets also prioritize user feedback and reviews, allowing buyers to make informed decisions based on the experiences of others. The combination of advanced technology, user-centric design, and a commitment to privacy ensures that darknet markets remain a viable option for secure and reliable drug trade in 2025.
Another Record Year For Ransomware Beckons As Crypto Profits Hit $460m
Jardine emphasized that illicit cryptocurrency transactions represent only a minor share of total crypto activity. We do not engage with darknet markets; our mission is exclusively dedicated to providing information for research and educational purposes. As the darknet continues to grow, its markets are expected to adopt even more sophisticated tools for secure trading, further enhancing the user experience and solidifying their role in modern commerce. Forums and magazines play a crucial role in keeping users informed about new market links and updates.
Ancient Dark Web Drug Market Moves Bitcoin Worth $775 Million
Given the darknet’s infrastructure, which is hidden behind onion routing, the darknet attracts sites whose proprietors want to remain anonymous. This suggests that the multiseller activity is sensitive to external shocks but also that it yields higher profits. Our classification shows that the number of sellers is significantly smaller than the number of buyers, as shown in Figs. The number of actors in the ecosystem is affected by several factors, especially market closures. Notably, the number of buyers and sellers significantly drops after the operation Bayonet in the last quarter of 2017, which shut down AlphaBay and Hansa markets, causing a major shock in the ecosystem34.
This signals a growing preference among darknet operators for obfuscation and anti-surveillance tools. Cryptocurrency-enabled drug sales also grew by over 19% from 2023 to 2024, reaching nearly USD 2.4 billion in volume. During the same period, the number of newly launched darknet marketplaces declined 42% year over year — indicating that while the ecosystem is consolidating, remaining actors may be becoming more operationally advanced.

Although the site’s administrator, Vito, attributed the problems to DDoS attacks and a spike in traffic, TRM Labs observed that this pattern closely resembles known exit scams. These marketplaces generally fall into two major ecosystems, Russian and Western. The indictment alleges that Parsarad founded Nemesis in March 2021, and that the marketplace grew to serve more than 150,000 users and register around 1,100 vendor accounts worldwide. As the first media outlet to report on blockchain-powered applications, we provide early adopters, developers, and visionary leaders with access to emerging technological landscapes, including wallets and games.
What Is The Darknet And What Does It Have To Do With Bitcoin?

Darknet markets operate as hidden e-commerce platforms, often facilitating illegal trade while employing advanced cybersecurity measures to evade law enforcement. The recent downtime of Black Ops Darknet Market highlights the volatile nature of these platforms, where operational security (OPSEC) and infrastructure resilience are constantly tested. The use of cryptocurrencies such as Bitcoin and Monero remains central to these platforms, ensuring anonymous transactions and reducing the risk of financial tracking. Additionally, the implementation of decentralized marketplaces has further enhanced security by eliminating single points of failure.
In the case of Nemesis Market — another platform covered in TRM’s reporting — US authorities sanctioned an Iranian national linked to more than USD two million in cryptocurrency transactions involving narcotics, stolen data, and illicit services. That case, like Archetyp, demonstrates how darknet infrastructure is often transnational, technically sophisticated, and deeply intertwined with the global financial system. Perhaps no entity better illustrates the professionalization of the crypto crime ecosystem than the online marketplace Huione Guarantee. As we highlighted in our 2024 mid-year crypto crime update, Huione and all vendors operating on their platform have processed more than $70 billion in crypto transactions since 2021. In 2025, darknet markets continue to provide a secure and efficient platform for the trade of pharmaceuticals and recreational substances.

Criminals now purchase ready-to-use malware kits, phishing templates, and ransomware programs. These tools come with user manuals and customer support, enabling even non-technical actors to conduct complex cyberattacks. Litecoin, Zcash, and Dash also see usage, though Monero and Bitcoin dominate the dark web. Some marketplaces have even mandated Monero-only transactions, underscoring a strong preference for privacy-focused coins over traceable ones.

In cases where we’re able to confirm such information, we count the transactions as illicit in our data. For example, since the conviction of FTX’s former CEO of fraud, our 2022 figures have included the $8.7 billion in creditor claims against the exchange. However, there are almost certainly many instances where we do not have such confirmation, and therefore the numbers would not be reflected in our totals.