Skip to content
Platform overview · data current as of April 21, 2026

Nexus market: what it is and how it works

Nexus launched in November 2023 and has grown into one of the most technically distinctive markets on Tor. This page covers the platform architecture, vendor system, escrow mechanics, and what makes Nexus different from what came before it.

Launched November 2023
Users 52,342
Vendors 1,394
Listings 23,752
Uptime (30d) 97.6%
§01 · background

What Nexus is and where it came from

Nexus market opened in November 2023. It entered a space that had lost several established platforms in the years prior — markets that had stopped accepting new users or gone dormant after sustained DDoS pressure or management decisions. The community had consolidated around a small number of alternatives, each with architectural debt from earlier design choices that prioritized speed over security.

Nexus was built differently from the start. PGP login was not a feature added in a later update — it was in the initial release. Multisig escrow defaulted on for all transactions above a small threshold, not offered as an advanced option. The interface was designed by people who had used the existing markets and found them functionally adequate but visually and ergonomically poor.

By April 2026, Nexus has 52,342 registered users — profiles with at least one login in the past 90 days — and 1,394 vendors who have completed the bond and probation process. The active listing count sits at 23,752. Those are not marketing-rounded numbers. The daily confirmed transaction rate averaged 3,847 across the April 14–20 week.

Nexus market interface rendered through Tor Browser in April 2026, showing the cyberpunk visual theme
Nexus homepage as rendered through Tor Browser. Interface snapshot from April 2026.

The design decision that separates Nexus

Most darknet markets in 2023 used variations of a bootstrap theme that had been in circulation since 2018. Same card layout, same gray palette, same navigation structure. Nexus chose a completely different visual direction: a cyberpunk aesthetic with a hot coral-red accent, cyan highlights, deep purple backgrounds, and a custom type system. The interface is immediately distinctive — which is itself a security property. Users familiar with Nexus know what it looks like; phishing clones that copy the generic market layout are less effective against users who have spent time on Nexus.

The 15-language localization is not machine-translated. Nexus maintains hand-curated bundles for English, Russian, German, Spanish, French, Italian, Dutch, Portuguese, Polish, Czech, Swedish, Finnish, Turkish, Japanese, and Korean. Interface strings are versioned; native-speaker reviewers are credited per-language in the About section. This level of investment in localization is unusual and practically non-existent among comparable markets.

A market you can tell apart from a phishing clone by design is harder to replicate than one built on a generic template. That's not an accident.

Timeline: November 2023 to April 2026

In the first quarter after launch, Nexus focused on vendor onboarding and resolving early infrastructure issues. The multisig escrow system had two documented bugs in Q1 2024, both patched within 48 hours of discovery and disclosed in Dread post-mortems. The platform ran a bug bounty from launch; both bugs were found through that program.

Q2 2024 saw the first major DDoS campaign against all four mirrors simultaneously. Two mirrors experienced degraded performance for roughly 4.5 hours. The other two remained fully operational throughout. This was the event that validated the four-mirror architecture — a single-address platform would have been fully down for the same duration. In September 2024, Nexus passed 10,000 registered users. The 50,000-user milestone occurred in February 2026.

§02 · platform architecture

How Nexus is built and why it matters

Architecture decisions in a darknet market are security decisions. Every design choice either reduces your exposure or increases it. Here is what Nexus chose and what each choice means for users.

escrow

2-of-3 multisig escrow as the default, not an option

Standard centralized escrow has one fundamental problem: the platform holds the funds. A market going dark takes every in-escrow balance with it. This has happened enough times that users who have been on Tor markets for more than two years have almost certainly lost money to centralized escrow failures.

Nexus uses 2-of-3 multisig by default on all transactions above a small threshold. Three cryptographic keys are generated at checkout: one for the buyer, one for the vendor, and one held by Nexus. Releasing funds requires any two of the three. Buyer and vendor agree: they finalize without Nexus. Dispute: Nexus arbitrates using its key plus the winning party's key. Platform unavailable: buyer and vendor can finalize together without any Nexus key.

The last point is the important one. It means a Nexus outage — even a permanent one — does not strand user funds. Buyers and vendors who have their own keys can finalize transactions independently. No other architecture provides this. This is why multisig exists and why Nexus made it the default rather than an expert option.

authentication

PGP login available from first login, not as an advanced setting

Password-based authentication has a well-known attack surface: passwords can be guessed, stolen from breaches, or phished. On a platform where the phishing threat is active and capable, password login is structurally inadequate.

Nexus's PGP login works as follows. During registration, you upload your public key. On subsequent logins, Nexus encrypts a challenge string with your public key and displays it on screen. You decrypt it using your private key in GnuPG (or any compatible tool) and paste the plaintext back. If it matches, you're authenticated. Nobody phishes that — there is no password to steal, and the private key never leaves your device.

The implementation is not hidden in an advanced settings menu. It is offered during the standard post-registration flow, at the same level of prominence as TOTP 2FA. This matters because the market's security posture is only as strong as what users are guided toward, not what's technically possible.

Abstract visualization of PGP challenge-response authentication flow used by Nexus market
payments

Three currencies at parity: Bitcoin, Monero, Litecoin

Nexus accepts all three through the same checkout flow and the same multisig system. No currency is treated as second-class. The privacy properties differ significantly, which is worth understanding before you choose.

Monero (XMR) is the recommended default. Its ring signatures obscure the sender in every transaction, RingCT hides amounts, and stealth addresses make recipients unlinkable. Combined with the two-hop withdrawal sequence described in the entry guide — exchange to local wallet, local wallet to Nexus — it makes chain analysis close to impractical against a well-run operation.

Bitcoin (BTC) is transparent on-chain. Every transaction is visible to anyone with access to the public blockchain — and companies whose entire business model is transaction tracing have access. Bitcoin can be used on Nexus, but it requires a coin mixer step before deposit to break the chain from your exchange KYC to your Nexus deposit address. Bitcoin without mixing is not meaningfully private.

Litecoin (LTC) offers faster confirmations and lower fees than Bitcoin, but its privacy properties are identical — fully transparent chain. It is a practical choice for smaller amounts where the mixing overhead of Bitcoin doesn't make sense and the user doesn't hold Monero.

Get Monero from the official Monero project and use a local wallet like the official GUI or Feather Wallet. The Privacy Guides Monero section has current wallet recommendations with privacy-relevant caveats.

infrastructure

Four independent Tor hidden services — one backend

Each of the four Nexus mirrors is a fully independent Tor v3 hidden service with its own cryptographic address. They connect to a shared backend infrastructure. What this means for users: any mirror gives full access to the same account, same wallet, same orders, same inbox.

For resilience, the four-mirror setup means a targeted DDoS attack against one address has no effect on the other three. In the June 2024 attack on Nexus — the largest sustained DDoS the platform has faced — two mirrors degraded for 4.5 hours while the other two operated normally. Total user impact was a slower connection on two paths, not a platform outage.

A phishing operator cannot take over one of these mirrors. Each .onion address is derived from a unique private key held by Nexus. There is no mechanism by which an attacker could reroute one of the four legitimate addresses to their own server. The attack vector for phishing is generating a visually similar but cryptographically distinct address, not hijacking an existing one.

Diagram showing Nexus four-mirror DDoS protection architecture with independent Tor hidden services
Four-mirror architecture: attack on one address leaves three fully operational.
§03 · vendor system

How vendors earn and maintain trust on Nexus

Vendor quality is the most significant factor in a market's usability. Nexus's approach to vendor vetting is more structured than most markets. Here is how it works.

Bond and probation period

New vendors pay a bond to list on Nexus. The bond amount is not publicly published by Nexus and varies by category. It serves two functions: it filters out casual scam attempts (a bond is a real financial cost to abandon), and it provides partial restitution to buyers in the event of proven scam behavior — the bond is held until the vendor closes their account in good standing, at which point it is returned.

After paying the bond, new vendors enter a probation period. Listing volume is capped. All transactions are flagged for additional monitoring. Dispute handling is prioritized. Vendors who complete the probation with satisfactory metrics — completion rate above threshold, dispute rate below threshold, response time within policy — graduate to full vendor status.

This two-step process costs legitimate vendors time and money upfront. It is intentionally a barrier, and that barrier is the point. Scam operators look for the path of least resistance. A platform where you can register a vendor account in ten minutes and list immediately is a platform where scam accounts will concentrate.

Metric Healthy range Platform average (Apr 2026)
Completion rate >97% 98.2%
Dispute rate <3% 1.7%
Avg response time <24 hours 11.4 hours
Vendor rating (avg) 4.5+ 4.7 / 5

Reputation signals buyers should check

Nexus vendor profiles display order count, completion rate, dispute rate, average response time, account age, and listing count. All of these are publicly visible to any logged-in user before placing an order. There is no need to cross-reference Dread for standard reputation checks — though Dread remains useful for tracking vendors who operate across multiple markets or who have unresolved community disputes from older platforms.

The built-in forum is a significant differentiator. Vendor AMAs, dispute outcome summaries, and category-specific discussion threads all live inside the Nexus UI. Users who have had disputes with a vendor often post about it. This signal is harder to fake than aggregate ratings and provides context that star counts do not.

For first-time buyers evaluating a vendor, the practical checklist: 50+ completed orders, account over three months old, dispute rate under 3%, active forum presence, response time under 24 hours. A vendor who passes all five criteria is substantially more trustworthy than one with a 5.0 rating from eight reviews. The EFF's approach to trust metrics is relevant context here — institutional trust is built on behavior records, not self-reporting.

Dispute resolution process

Disputes on Nexus follow a PGP-signed evidence model. When a dispute is opened, both the buyer and vendor submit statements to Nexus staff. Statements must be signed with the submitting party's PGP key — this prevents post-hoc alteration of the record. Staff review the signed evidence and apply the Nexus key plus the winning party's key to finalize the multisig escrow.

The PGP signature requirement is not bureaucratic friction. It is the mechanism that makes the evidence tamper-evident. A statement signed on Tuesday cannot be quietly modified on Wednesday. Both parties know this going in, which changes the incentive structure around making accurate claims versus exaggerated ones.

Vendors who post accurately about what they sell, respond quickly, and handle disputes transparently build a track record that survives any single bad transaction. The platform surfaces that record to every potential buyer.
§04 · market context

Nexus feature comparison — April 2026

Direct comparison of Nexus against the characteristics users typically look for in a market. Data based on publicly documented platform features as of April 2026.

Feature Nexus Standard market
Escrow type 2-of-3 multisig (default) Standard centralized
PGP login Built into registration flow Advanced / optional
JavaScript required No — fully server-rendered Often yes for checkout
Mirror count 4 independent hidden services 1–2 typically
Currencies accepted BTC, XMR, LTC at parity Usually BTC only
Built-in forum Yes — no Dread dependency Rare — Dread required
Language support 15 hand-maintained locales English only / auto-translate
Vendor vetting Bond + probation period Bond only or none
Dispute evidence model PGP-signed statements Unsigned text
Bug bounty Active since Jan 2024 Uncommon

"Standard market" column reflects what was common across major markets operating in 2023–2025, based on community documentation and user reports. Not every market listed is still active or accepting new users. This comparison does not endorse or recommend any specific market. For access links, only use verified addresses from this directory.

§05 · current numbers

Nexus market in April 2026

Activity figures cross-referenced against Dread status threads and Nexus platform announcements. No marketing rounding — every number below is verifiable against public sources.

0
Registered users

Active profiles with at least one login in the past 90 days. The 50,000 milestone was reached in February 2026, up from 47,000 at the start of the year.

0
Approved vendors

Vendors who have completed bond payment and the full probation period. Average account age 11.4 months. Background checks are real and consequential.

0
Active listings

Live at the last snapshot across all categories. Delisted and expired items are excluded. Count is refreshed hourly against the live platform catalog.

0
Daily transactions

Confirmed transactions averaged over the April 14–20, 2026 week. Covers all three currencies at parity — XMR, BTC, and LTC combined.

MetricValuePeriod
30-day composite uptime97.6%March 21 – April 20, 2026
Avg vendor rating4.7 / 5April 2026
Median escrow hold time14.2 hoursQ1 2026
Dispute rate (platform avg)1.7%Q1 2026
Avg vendor response time11.4 hoursQ1 2026
Languages supported15 (hand-maintained)Current
Active mirrors4 of 4April 21, 2026
Bug bounty reports patched14 since Jan 2024Cumulative

Why this directory exists

nexusdark.vip is an independent link directory. We are not affiliated with Nexus staff, do not operate any part of the market, and handle no transactions. Our purpose is to publish verified .onion addresses sourced from PGP-signed Dread announcements, so users looking for Nexus have a reliable reference that isn't a phishing clone.

This platform overview page exists because users who understand what they're connecting to make better decisions than those who don't. The EFF and Privacy Guides have documented why informed users are harder to phish and more resistant to social engineering. That's the principle behind this page.

Nexus market interface showing the distinctive cyberpunk design with coral-red and cyan accent colors
The Nexus interface in April 2026. The visual identity is distinctive by design — harder to replicate convincingly than a generic market template.
§06 · platform questions

Common questions about Nexus market

Platform-specific questions. For access instructions, see the entry guide. For verified links, see the onion links page.

When was Nexus market launched?

Nexus launched in November 2023. By April 2026, the platform has grown to 52,342 registered users, 1,394 approved vendors, and 23,752 active listings. It reached the 50,000-user milestone in February 2026 — sixteen months after launch. The platform has maintained 97.6% composite uptime across all four mirrors in the trailing 30-day period ending April 20, 2026.

How does the Nexus vendor system work?

New vendors pay a bond and enter a probation period with capped listing volume and elevated monitoring. After completing probation with satisfactory completion rate, dispute rate, and response time, they graduate to full vendor status. The bond acts as collateral against scam behavior and is returned when the vendor closes their account in good standing. The two-step system creates a meaningful barrier that filters casual scam attempts while remaining achievable for legitimate vendors. See the vendor section above for detailed metrics.

How does Nexus compare to other darknet markets?

Nexus differentiates on three dimensions: security architecture (multisig by default, PGP login in the registration flow, no JS required), interface quality (distinctive cyberpunk design, 15-language support, built-in forum), and scale (52,342 users, 23,752 listings as of April 2026). The comparison table in the §04 section covers specific features against what is typical in the market category. In practical terms, Nexus is one of the few markets where the default settings are also the secure settings — most platforms require users to actively find the secure options.

What is the Nexus vendor bond?

The vendor bond is a deposit paid when applying for a vendor account. The amount is not publicly disclosed by Nexus and may vary by category. It serves as collateral: if a vendor scams buyers and loses disputes, the bond funds partial restitution to affected buyers. Vendors who close their accounts in good standing after completing the probation period have the bond returned. The bond amount is significant enough that abandoning an account represents a real financial cost, which is the design intention.

Does Nexus have a bug bounty program?

Yes. The Nexus responsible disclosure program has been active since January 2024. Researchers who find and report vulnerabilities through proper channels receive a reward scaled to severity. As of April 2026, fourteen security reports have resulted in patches, including two in the early months that addressed issues in the multisig escrow implementation. Both were patched within 48 hours of report and disclosed in sanitized Dread post-mortems.

What happened to other major markets before Nexus?

Several platforms that were active in 2021–2023 ceased operations before Nexus launched. Some went dormant after management decisions or sustained DDoS pressure, others stopped accepting new users, and several faced enforcement actions and were subject to law enforcement activity. Nexus entered in late 2023 and has operated continuously since. Its multisig escrow and PGP-first architecture reflect structural lessons from centralized escrow failures where platform unavailability meant frozen user funds with no recovery path.

How does dispute resolution work on Nexus?

Disputes that buyers and vendors cannot resolve directly can be escalated to Nexus arbitration. Both parties submit PGP-signed statements with supporting evidence. The signature requirement prevents post-hoc alteration of submitted evidence. Staff review the record and apply the Nexus arbitration key plus the winning party's key to finalize the multisig escrow. The PGP evidence model changes the incentive structure for accuracy — both parties know their signed statements are permanent records that cannot be quietly modified after the fact.

Is this site the official Nexus website?

No. nexusdark.vip is an independent link directory. We are not affiliated with Nexus staff or operations, do not operate any part of the marketplace, and handle no transactions. Our role is to publish and maintain a verified list of Nexus .onion addresses sourced from PGP-signed Dread announcements, so users can find the real platform without falling for phishing sites. The actual Nexus market is only accessible via Tor Browser using one of the verified addresses on our onion links page.

What categories does Nexus support?

Nexus supports a broad category tree covering physical goods, digital products, and services. Specific categories are vendor-controlled within Nexus's platform rules, which prohibit certain categories entirely. The 23,752 active listings as of April 2026 span the full range of what Nexus permits. For the current category structure, browse directly via a verified onion link in Tor Browser.

Get a verified Nexus link. Open it in Tor Browser.

All four mirrors are verified and online as of April 21, 2026. PGP-checked against Dread announcements. If you haven't set up Tor Browser yet, the entry guide covers the full eight-step process in under an hour.