Inflows to chemical precursor shops suspected to be based in China total more than $98 million in the new address set. We found that those addresses received more than $37.8 million worth of cryptocurrency between January 2018 and April 2023. Additional data related to this paper may be requested from the corresponding author. All data needed to evaluate the conclusions in the paper are present in the paper. Therefore, key actors in the ecosystem of DWMs may play important roles in broader criminal networks. For instance, a recent London Metropolitan Police (MET) investigation examined the transactions of a seller profile on a DWM10.

Pumpfun Team Cash-Out Triggers $4365M USDC Exit, PUMP Token Slides 24% And Sparks Centralization Fears
However, they have so far mainly focused on DWM users, without distinguishing between buyers and sellers, and neglecting the different weight that more active users may have in the system. Conversely, transaction networks obtained from the blockchain contain the entire transaction data of the DWMs and U2U transactions, allowing a thorough investigation of the ecosystem as a whole. Many DWMs were closed, either by law enforcement operations or by exit scams, leaving their users with significant losses1.
Budget, Financial Reporting, Planning And Performance

And trying to understand how and whether is it involved OC on these cyber drug markets and the chain behind them. Binance’s FIU was crucial in a global operation led by U.S. and Taiwanese authorities, dismantling the $100M Incognito Market darknet drug platform. In late March, hackers posted huge volumes of Binance users’ data on the dark web, creating potential security issues. Binance announced today that it cooperated with the US Department of Justice and Taiwanese law enforcement to take down a major dark web drug market. Fraud shops are services found mainly on the dark web that sell stolen data and personally identifiable information (PII), which cybercriminals use for scams, identity theft, and ransomware attacks. While China-based vendors are frequently referenced as the source of precursors for dangerous synthetic drugs, their involvement in machinery sales is also an important aspect of the drug supply chain.

Financial Institutions
With its low 5% vendor fee, secure transactions, and verified sellers, it’s an ideal choice for buyers looking for a trusted marketplace. To prevent users from DDoS attacks, it provides personal marketplace domains to high-volume buyers and sellers. Threat actors have begun developing proprietary mobile apps allowing buyers and sellers of illegal goods to communicate in close to real-time mode, as well as transmitting information about "packages" with delivered drugs via alternative digital channels.
Second, while wholesale drug purchasing revenues have steadily climbed since that drop, they have yet to regain their former highs. When examining drug-purchasing habits from DNMs spanning 2020 to 2024, some patterns emerge, in particular about wholesale activity, that is, purchases likely made by organizations with the intent to redistribute. Throughout 2024, DNM vendors also sent far more value to personal wallets and stored funds on-chain. Last year, DNM vendors sent a significantly higher portion of their funds to DeFi than they did historically. As international authorities have disrupted DNMs large and small in the last few years, cybercriminals and drug dealers have learned firsthand the consequences of running BTC-accepting DNMs given the currency’s inherent transparency. Nemesis Market also saw its demise in March, when German authorities seized its infrastructure, along with $102,000 in cryptocurrency.
It sold deadly narcotics fentanyl, heroin, stolen IDs, malware tools, firearms and more. After Silk Road’s fall, AlphaBay rose in late 2014 as the largest dark web market ever. Its fall began with a tip to U.S. agents and clever bitcoin tracking.
History Of Dark Web Marketplaces
Silk Road not only aggregated thousands of drug vendors, it created a user-friendly interface that resembled a clear-net shopping website. The market is especially well-known for providing access to freshly compromised data, often obtained from recent breaches and stealer logs. Transactions are conducted through Bitcoin and Monero which provides anonymity for both buyers and sellers. The marketplace requires merchants to pay fees to sell their products, helping ensure a certain level of quality control. Here’s a look at the top 10 dark web markets currently dominating this underground space.
My Medium Term Bitcoin Bear Thesis – And Why This Winter Could Be The Shortest Yet
- Like others, WSM sold tons of drugs, fake goods and hacking software.
- We perform the same procedure to compute the daily time series of multibuyers but using the daily time series of buyers obtained from step 2.
- As part of the investigation, the Dutch National Police took the lead on cybercrime prevention, and Van Well shared his insight on the sophistication of the fraud shop’s operation.
- Nexus darknet market exemplifies this progress through its resilient onion-based infrastructure, providing a streamlined interface for its drug marketplace.
- TRM Labs explained that several factors contributed to the continued dominance of Russian darknet marketplaces.
- Some users report the online element having a moderating effect on their consumption due to the increased lead time ordering from the sites compared to street dealing.
Below are 2025’s leading darknet markets, ranked by listings, trade volume, and vendor reliability. While the darknet market ecosystem showed signs of recovery in 2023, it has yet to return to the revenues it experienced before the Hydra Marketplace closure in 2022, given the financial success of that operation. Fentanyl and fentanyl-laced drugs also arrive in the United States through Latin America based cartels.
AlphaBay & Hansa 2014 2017 Operation Bayonet
However, Durov's arrest has heightened fears that Telegram will now provide data on its users to law enforcement. The arrest of Telegram’s founder, Pavel Durov, in August 2024 triggered a notable shift in the operational dynamics of the platform's drug vendors. This incident also marked the never-before-seen attempt of its administrator, Pharoah (arrested in May 2024 and revealed to be 23 year-old Taiwanese national Rui-Siang Lin), to extort the marketplace’s users. Cryptocurrency-enabled online sales of illicit drugs saw a year-on-year growth of over 19% between 2023 and 2024, nearing USD 2.4 billion. Its fall disrupted a huge part of the global drug trade, showing that even sprawling, language specific markets can be dismantled.
The multihomers play a crucial role in the ecosystem because they act as edges between markets. Specifically, to be classified as a multiseller, a user must be classified as a seller in at least two markets simultaneously. These results suggests that a strong dominance in the ecosystem induces anticorrelation between the median net income of sellers and buyers. Specifically, sellers show a trend of increase and buyers a trend of decrease in their median net income before the shutdown. This structural change is reflected in the median net income of sellers and buyers, as shown in Fig. After the shutdown of Silk Road, in the last quarter of 2013, the ecosystem evolves to a structure where several markets coexist.
Best AI-Powered Tools For Managing Crypto Portfolios
- “Take control of your crypto portfolio with Markets PRO, DeFi Planet’s suite of analytics tools.”
- When looking at crypto inflows to DNMs in 2024, the data indicate that wholesale drug purchases were dominant, averaging between 71 and 81% of this year’s total market share.
- This step is independent of the sliding time window in step 2.
- Based on the observed dynamics, criminal actors are actively engaging in new deals and thus attracting both buyers and sellers which is increasing the volumes of drugs for sales in the Dark Web.
- It allows you to buy and sell a wide range of products and services with a good user experience.
There is however a steep drop-off in activity between the top sellers who have done over 10,000 sales compared to the others. Like all these other DNMs, the forum features crypto payment rails, with a seemingly exclusive bias towards Bitcoin. At the same time, all this is served under the knightly slogan “Let's knock the crown off Hydra!
While tactics like these may have helped boost revenue for both markets, again, they have yet to match Hydra’s sizable financial success. And, perhaps the most aggressive marketing stunt the darknet market ecosystem has seen yet, in December of that year, Kraken Market wrapped a bus in an advertisement that included a QR code for the market’s website. The chart above shows that, while values haven’t risen back to 2021 levels, darknet market revenue has slightly rebounded since Hydra’s closure in 2022. The ensuing war for darknet market dominance that began in 2022 continued into 2023, but no other market has since matched Hydra’s financial success.
Today, buyers and vendors look for reliable alternatives that offer security, escrow protection, and a strong vendor community. Silk Road was once the most well-known dark web marketplace, but after its shutdown, many new markets took its place. Finding a trusted dark web marketplace can be difficult, but we offer everything users need for a safe and smooth experience. The dark web is home to many online marketplaces, offering everything from digital goods to rare items. Not all marketplaces you want to visit can be accessed through regular search engines.