• Home
• FAQ

DrugHub Marketplace FAQ: Official Operational Answers

1. General Platform Architecture FAQ

Q: What is DrugHub Marketplace?

DrugHub is an independent darknet marketplace engineered entirely from scratch, operating continuously for over six years. It prioritizes functional security, mathematical privacy, and zero-custody transactions over decorative cosmetics. DrugHub operates strictly on Monero (XMR) payments and passwordless PGP authentication.

Q: Do I need an account to view products or browse vendor profiles?

No. DrugHub allows complete, unrestricted public browsing. You can search categories, review merchant feedback, inspect shipping corridors, and evaluate pricing without registering or logging in. An account is required solely when placing an order or communicating with vendors.

Q: How does DrugHub compare to Archetyp, Abacus, or Bohemia?

While platforms like Archetyp and Abacus invested heavily in intricate frontend user interfaces, they suffered catastrophic collapses and exit disruptions. DrugHub prioritized backend stability, database data purging, and zero hot-wallet exposure. The interface is functional and clean, and the platform has maintained an uninterrupted six-year operational track record.

2. Passwordless PGP Authentication FAQ

Q: Why does DrugHub not have a password field?

Traditional passwords are the primary vulnerability exploited by phishing proxies on the dark web. Phishers clone login pages to harvest credentials. By eliminating passwords entirely, DrugHub makes phishing mathematically useless. Authentication requires decrypting a randomized cryptographic challenge signed with your private OpenPGP key.

Q: What software should I use to decrypt the login challenge?

We recommend Kleopatra (pre-installed by default on Tails OS and part of the Gpg4win suite) for desktop users. Linux and macOS terminal users can decrypt instantly via gpg --decrypt. Mobile users on Android can utilize OpenKeychain. Consult our step-by-step DrugHub PGP Login Guide.

Q: Can staff help me recover my account if I lose my PGP key?

No. DrugHub operates on zero-knowledge security principles. We do not maintain backdoor access, email recovery mechanisms, or security questions. If you lose your private PGP key or forget your passphrase, account access cannot be restored.

Q: What is the Sign-In Message and why must I check it?

During registration, you configure a secret, custom phrase known only to you and DrugHub. When you log in, this phrase is displayed in the top header. Because phishing mirrors do not possess DrugHub's database, they cannot display your personal phrase. If the message is missing or incorrect, you are on a fraudulent site.

3. Monero (XMR) Payments & Invoices FAQ

Q: Why does DrugHub accept only Monero (XMR) and reject Bitcoin?

Bitcoin (BTC) operates on an open, transparent public blockchain where all transactions are permanently indexed by blockchain surveillance firms (Chainalysis, Elliptic). Monero provides mandatory protocol-level privacy via Ring Signatures, Stealth Addresses, and RingCT, concealing senders, receivers, and transaction sums completely.

Q: How do I fund my DrugHub wallet balance?

You do not pre-fund an account balance. DrugHub uses an invoice-based payment workflow. You add items to your multi-vendor Shopping Cart and proceed to checkout. DrugHub generates a unique single-use Monero stealth address for that specific order. You pay the exact amount from your local wallet (e.g., Feather Wallet).

Q: What is the marketplace commission fee?

DrugHub charges a transparent 5% buyer commission fee, which is calculated openly at checkout invoice generation. Unlike legacy markets that force vendors to conceal 5–10% fees in inflated item prices, DrugHub provides complete transparency.

Q: What happens if I underpay or overpay an invoice?

If you send less XMR than requested, the invoice remains in Partially Paid status. Send the remaining difference to the same address before the timer expires. If you overpay, the surplus funds are credited immediately to your internal DrugHub refund wallet, which you can withdraw or apply to future purchases.

4. Orders, Escrow & Dispute Resolution FAQ

Q: What is the Auto-Finalization (AF) Timer?

The Auto-Finalization (AF) Timer is the countdown period during which escrow funds remain protected while your package is in transit. Vendors configure this window between 5 and 45 days based on shipping destination and carrier requirements.

Q: What should I do if my package has not arrived and the timer is expiring?

Navigate to your order page and click Extend AF Timer before it expires. If transit has exceeded reasonable expectations and the vendor is unresponsive, click Open Dispute. Never allow an AF timer to lapse without extending or disputing; expired timers release funds automatically to the vendor.

Q: How are disputes resolved by staff?

When an order is created, DrugHub saves an immutable cryptographic snapshot of the vendor's listing description, terms, and refund policy. Disputes are judged strictly against the original terms agreed upon at checkout, preventing "bait and switch" tactics. If the vendor shipped tracked and tracking confirms delivery, escrow is awarded to the vendor.

5. Private Mirrors & DDoS Protection FAQ

Q: Why do public darknet mirrors experience latency?

Public darknet entry nodes are subject to continuous DDoS bombardment. DrugHub deploys client-side Proof-of-Work (PoW) CPU challenges to filter botnet floods, requiring your browser to compute a brief cryptographic puzzle before granting access.

Q: How can I obtain my own dedicated private mirrors?

Approved vendors receive two private mirrors automatically. Active buyers who establish consistent transaction history can submit an internal support ticket requesting private links. Private mirrors are isolated, completely immune to DDoS, and bypass PoW challenges entirely.

6. Vendor Application, Bonds & E2EE FAQ

Q: How can I waive the vendor bond?

DrugHub waives vendor bonds on a case-by-case basis for established merchants from defunct markets (Archetyp, Abacus, Bohemia). You must submit proof of sales history signed cryptographically with the identical PGP key. Staff verifies the signature against historical database archives.

Q: What is the DrugHub Encryption Helper?

The Encryption Helper is an open-source client-side reverse proxy running locally on the vendor's machine (available in Python ~280 lines and Go ~290 lines). It transparently decrypts incoming customer inquiries and encrypts order replies in real time, saving vendors hours of manual PGP operations while preserving 100% End-to-End Encryption.

Q: Are Employee Sub-Accounts supported?

Yes. Vendors can create employee accounts with restricted permissions (e.g., managing customer service chats and marking dispatches) without disclosing their master account password, PGP private key, financial ledgers, or payout settings.

7. Account Hygiene & 6-Month Purge Policy FAQ

Q: Why does DrugHub delete accounts after 6 months of inactivity?

Retaining dormant user accounts and historical records is an unacceptable OpSec liability. To protect user privacy and maintain database performance, accounts inactive for approximately 180 days are permanently purged.

Q: If my account is purged, can I re-register with the same PGP key?

Yes. You can re-register immediately using the exact same OpenPGP public key and set a new Sign-In Message. Note that past order history and feedback scores cannot be restored once an account is purged.