Knowledge Base & FAQ

Technical documentation regarding DrugHub Market operations, security protocols, PGP authentication, and Monero payment processing.

1. Platform Architecture

SYS_INFO_V2

DrugHub is a next-generation darknet marketplace architected for maximum operational security. Unlike legacy markets, it employs a "Walletless" design and enforces PGP-only authentication.

The backend is distributed across multiple Tor hidden service nodes to prevent seizure and DDoS attacks. We operate exclusively on the Monero (XMR) blockchain to ensure transaction unlinkability.

Security requires strict mirror verification. Only use the signed mirrors provided below. Verify the PGP signature on the homepage before logging in.

Main: vmmrsxkevd5j2krt6qo3nw5saj555bbte3hc27lrjkadljxu43sfkcqd.onion
Mirror A: 3ew4rz3ffp7ehziujjjzotcllgfiy6fulgbpikuyniae3tkqkpsagcid.onion
Mirror B: pvvq36hzj2232mqycl4vxzosliks2fyqucbuoz72prtepo3zdbzzeyyd.onion
Mirror C: vetvadidubsroeagu3lwroik4g336dg6ybmzbp2wb6tz7faghm6f3fqd.onion
To mitigate network congestion and targeted DDoS attacks, DrugHub assigns a unique, rotating Onion address to every verified user after their first purchase. This address is known only to you and the server. If the main links are down, your private mirror will likely remain operational.

2. Security & Authentication

SEC_PROTO_V4

DrugHub does not store passwords. Authentication relies entirely on asymmetric cryptography.

  1. Enter your username.
  2. The server presents a random text block encrypted with your Public PGP Key.
  3. You decrypt this block using your Private Key to reveal the verification code.
  4. Enter the code to establish a session.

This method renders database leaks credential-neutral, as no secrets are stored on our servers.

Since our login process strictly requires PGP decryption, 2FA is intrinsic to the system. You cannot log in without possession of your private key. Additional 2FA methods (like TOTP) are redundant and not implemented to reduce attack surface.
We enforce strict no-logs policies. Server access logs are piped to /dev/null. All images are stripped of EXIF data upon upload. Messages are auto-encrypted if the recipient has a PGP key, though we strongly recommend manual encryption on your local machine before pasting into the chat box.

3. Payments & Escrow

XMR_ONLY
Bitcoin (BTC) is a transparent ledger; all transactions are publicly traceable. Monero (XMR) uses Ring Signatures, RingCT, and Stealth Addresses to completely obfuscate the sender, receiver, and amount. For the safety of our vendors and users, DrugHub only processes XMR.
Traditional markets require you to deposit funds into a central wallet, creating a single point of failure and risk of exit scams. DrugHub is walletless. When you place an order, a unique subaddress is generated specifically for that transaction. You send the exact amount + network fees directly to that address.
We utilize a standard escrow system where funds are held until the buyer confirms receipt or the timer expires.
  • Auto-Finalize: Orders finalize automatically after 14 days for physical goods (adjustable by shipping tier) or 48 hours for digital goods.
  • Disputes: If an order is not received, the buyer must open a dispute before the timer expires. Admin mediation will review evidence (shipping logs, chat history).

4. Orders & Vendor Policy

LOGISTICS
We maintain a strict harm reduction policy. The following are banned and will result in immediate vendor ban:
  • Fentanyl and carfentanil derivatives
  • Weapons, explosives, and poisons
  • CP or exploitation material
  • Hitman services or violence-related listings
Vendor status requires a bond payment (currently 1.5 XMR) which acts as insurance against selective scamming. Established vendors from other markets (Archetyp, ASAP, etc.) can apply for a bond waiver by providing signed PGP proof of identity from their profiles on those platforms.
Tor network latency is common. If a specific mirror times out, rotate to the next mirror in the list on our Links page. Ensure your Tor Browser is updated to the latest version. If all links fail, check major forums (Dread) for status updates signed by the DrugHub admin PGP key.