Dream Market

~ the obituary ~

the interesting number here is uptime. markets of this kind died at a rate that made two years look like a career, either seized by police or emptied out overnight by their own operators. dream ran from late 2013 to april 2019 and gave everybody five weeks of warning before it went.

it opened within weeks of the silk road seizure and spent its first years in second or third place, a competent site nobody wrote articles about. that turned out to be the survival strategy. it sold drugs and stolen data behind escrow and kept its vendor ratings honest enough that people came back. mostly it stayed unremarkable while the loud markets attracted the attention that killed them.

july 2017 handed it the market. alphabay was seized on the fourth, hansa was revealed on the twentieth as a police operation, and the people who had used both needed somewhere to go. by early 2019 dream was carrying more than 120,000 listings and was, by a wide margin, the biggest thing of its kind still answering.

i want to be clear that i never had any business on tor and this is a reconstruction from reporting, not memory. what pulled me into reading about it was the failure mode. a service that stayed up for five and a half years against police and against its own criminal user base was eventually taken off the internet by one person with a botnet and an invoice.

~ the case file ~

~ how it lasted so long ~

the boring answer is that it was run by somebody who wanted to keep running it. most of these sites ended in what the trade calls an exit scam, where the operators wait until the escrow balance is fat and then simply stop answering. dream never did that, which is why vendors with reputations to protect kept their listings there.

it also stayed technically stubborn. mirrors were the whole defense against a hidden service being knocked offline, and by the end dream was publishing hundreds of onion addresses so that some fraction of them would answer at any given moment. that is not a business decision. that is a sysadmin problem, solved the way sysadmins solve things.

~ the siege ~

the attacks started in 2018 and never really stopped. by early 2019 the site was down more than it was up, trading had halted for weeks at a time, and more than six hundred mirror links were not enough to keep a login page reachable. the operators said publicly that a single actor was behind it, asking four hundred thousand dollars in cryptocurrency to call it off.

they did not pay. after roughly seven weeks of it, on 24 march 2019, a banner went up announcing that the market would close on 30 april and transfer its services to a partner company at an onion address that was not yet online. almost nobody believed the partner line. the timing did not help, since two days later europol and the fbi announced sixty-one arrests and fifty shuttered accounts from an operation that had been quietly running for months.

~ the exit ~

the arrests had been landing on dream for a while. gal vallerius, who sold under the name oxymonster and moderated the site, was picked up at atlanta airport in august 2017 when a laptop search turned up the pgp key that matched his public postings. a german national known as speedstepper was later arrested and identified as the main administrator. whether the shutdown announcement came from the operators themselves or from a police force that already had the keys is still not settled.

it closed on schedule, which is the strangest detail of all. the partner site never amounted to anything and the traffic scattered across a dozen smaller addresses that mostly did exit-scam their users. the thing dream actually proved is that these markets do not die of law enforcement alone. they die of the same things any other unloved service dies of, which is somebody attacking your infrastructure faster than you can pay to defend it.

@}-->--

              )
             (_)
            .-'-.
            |   |
            |   |
            |   |
            |   |
          __|   |__   .-.
       .-'  |   |  `-:   :
      :     `---'     :-'
       `-._       _.-'
           '""""""

« previous  ·  random  ·  next »