All private messages between buyers and sellers are encrypted with PGP public keys. Only the intended recipient can decrypt and read messages. Even if our servers were compromised, your communications remain unreadable.

Optional PGP-based 2FA adds a second layer of login security. After entering your password, you must decrypt a unique challenge with your private key to prove your identity. No phone numbers, no third-party apps, no metadata trail.

We accept Bitcoin (BTC) and Monero (XMR) exclusively. No banks, no credit cards, no identity verification. Monero offers the strongest transaction privacy available — your payments cannot be traced on the blockchain.

Every transaction is protected by escrow. Funds are held securely until the buyer confirms delivery. Disputes are resolved by an independent support team. Neither party can be scammed.

Fully compatible with the Tor network and accessible via .onion address. Your real IP address is never exposed. The entire interface works without JavaScript — no browser fingerprinting, no tracking scripts, no analytics.

The entire platform is built with CSS-only interactions. No JavaScript is required to browse, buy, sell, or communicate. This eliminates an entire class of attacks including XSS, browser exploits, and code injection.

Withdrawals are protected by a personal PIN, trusted address whitelisting with cooldown periods, new-account lockouts, and password-change security delays. A dead-man switch freezes all withdrawals if site administrators go offline.

We do not require email addresses, phone numbers, real names, or any identifying information to create an account. IP addresses are privacy-hashed with a daily rotating salt — even we cannot see your real IP. Login history stores only truncated, irreversible hashes.

Entry captchas, login throttling, honeypot fields, CSRF protection on every form, and per-IP rate limiting prevent bots, brute-force attacks, and automated abuse. Failed login attempts are tracked and locked out automatically.

All uploaded images are re-encoded server-side to strip EXIF data, GPS coordinates, camera information, and any embedded metadata. Uploaded files are served with strict security headers preventing execution or sniffing.

Independent support staff mediate disputes between buyers and sellers. Auto-finalization timers ensure sellers receive payment for delivered goods. Auto-cancel timers protect buyers from unresponsive sellers. The system is designed to be fair to both sides.