SYSTEM KNOWLEDGE BASE

DrugHub Market Link serves as the official, cryptographically verified gateway to the DrugHub ecosystem. We are not the marketplace itself but the secure directory that maintains active, signed .onion mirrors. Our primary function is to mitigate Man-in-the-Middle (MitM) attacks by providing a static, verified reference point for market access. We also host operational status updates, PGP keys, and security tutorials.

Access is restricted to the Tor Network. Standard browsers (Chrome, Firefox, Safari) cannot resolve .onion top-level domains. Follow this protocol:

1. Download Tor Browser from the official project site.
2. Set security level to "Safer" or "Safest".
3. Copy a verified mirror from our Links page.
4. Verify the PGP signature upon landing on the login page.

Yes. DrugHub operates with a "Public Catalog" policy. Unregistered users can view listings, vendor profiles, feedback scores, and pricing data. This transparency allows prospective users to verify stock availability and market health before committing to account creation. However, placing orders, accessing private mirrors, and communicating with vendors requires a PGP-verified account.

We utilize a challenge-response authentication protocol to eliminate credential storage risks. The server does not store passwords.

• Step 1: You enter your username.
• Step 2: The server generates a random token and encrypts it using your Public PGP Key.
• Step 3: You decrypt the message using your Private Key and paste the token back.

This ensures that only the holder of the private key can access the account, rendering brute-force or database leak attacks useless.

To combat DDoS attacks, DrugHub assigns a unique, private .onion URL to every registered user. This segregates traffic, ensuring that even if the public login page is under attack, your personal access point remains functional. Your private mirror is tied to your account; never share it, as it serves as a persistent, high-speed gateway tailored for your session.

Verification is the only defense against phishing. The market login page always displays a PGP-signed message containing the current timestamp and mirror URL. You must import the DrugHub Official Public Key into your keyring (GPG/Kleopatra) and verify this message. If the signature is invalid or missing, you are on a phishing site—disconnect immediately.

Bitcoin's transparent ledger is a liability for darknet commerce. Chain analysis firms can trace BTC transactions years after they occur. Monero (XMR) is mandated because it enforces privacy at the protocol level. Ring Signatures obfuscate the sender, Stealth Addresses hide the receiver, and RingCT hides the transaction amount. This ensures complete financial forward secrecy for all market participants.

We use a 2-of-3 Multi-Signature Escrow model. Funds are held in a secure wallet controlled by three keys: Buyer, Vendor, and Market.

• Normal Case: Buyer + Vendor sign to release funds upon delivery.
• Dispute Case: Market + Buyer sign to refund, OR Market + Vendor sign to finalize.

This prevents unilateral theft. Funds are never held in a central hot wallet that can be easily seized or stolen.

Deposits: Require 10 verifications on the Monero blockchain (~20 minutes). This prevents double-spend attacks.

Withdrawals: Processed in batches every 6 hours. Larger withdrawals may trigger a manual security review (up to 24 hours) to prevent automated wallet draining exploits. Always verify your withdrawal address is correct; XMR transactions are irreversible.

Our vendor vetting process is rigorous. Applicants must pay a non-refundable bond (pegged to 5 XMR) to discourage scammers. Additionally, we require proof of reputation from other established markets (Archetyp, etc.). New vendors are placed on a "Probationary Status" where FE (Finalize Early) is disabled until they complete 50 successful sales.

If an order fails to arrive or is compromised, you must open a dispute before the Auto-Finalize timer expires (usually 14 days). Once a dispute is open, a moderator reviews the encrypted chat logs and transaction data. Funds remain locked in escrow until the moderator issues a verdict. Note: If the timer expires, funds release automatically and cannot be recovered.

DrugHub strictly prohibits harm-focused listings. Banned items include: weapons/explosives, poisons (fentanyl laced items/suicide materials), CP, and hitman services. We focus exclusively on digital goods, fraud utilities, and pharmaceutical/recreational substances. Violations result in an immediate vendor ban and bond seizure.

If the main mirror is unreachable, it is likely due to Tor network congestion or a targeted DDoS attack. Do not panic.

• Try a new Tor Identity (Ctrl+Shift+U).
• Check our status indicator in the top nav bar.
• Attempt to access via a rotating mirror from the Links page.

Support is tiered based on user status. Active users should use the internal ticket system (encrypted). For login issues or account lockouts, use the Contact Form on this site or reach out via Jabber (XMPP). Response times average 24-48 hours. Please do not spam tickets.