Darknet Market Takedowns: Silk Road to Nexus
Darknet market takedowns and exit scams look the same on the morning the site will not load. The difference shows up in what is left behind. A seizure leaves a police banner and, usually, arrests. An exit scam leaves silence and the escrow. A retirement leaves a date the staff announced in advance, and a window in which withdrawals still worked.
Thirteen years of those endings, from Silk Road on 2 October 2013 to Nexus in October 2026, are below. The recent ones have their own pages. This one is the run of them.
Two Ways a Market Dies
There are three, and people keep counting two. A seizure is law enforcement taking the servers. The homepage comes back as their notice. Archetyp got that banner in June 2025, days after it had gone offline under a "maintenance" message that looked exactly like a cash-out.
An exit scam is the operators taking the balance and leaving. Withdrawals stick first. Deposits often keep working, which is how you can tell a stall from a real outage: the inbound side still wants money. Then the site goes dark, and no agency claims it. Abacus in July 2025 and DarkMatter in September 2026 both ended that way. So did Nexus, a few weeks after DarkMatter.
The third ending is a voluntary close. The staff name a day, tell people to withdraw, and then stop. Dream Market announced one in March 2019. White House Market carried one out in October 2021, with a real withdrawal window. A retirement that skips the window is an exit scam wearing a goodbye.
The Dates, in One Pass
| When | Market | How it ended |
|---|---|---|
| 2 Oct 2013 | Silk Road | FBI seizure |
| 6 Nov 2014 | Silk Road 2 | Seized in Operation Onymous |
| Mar 2015 | Evolution | Exit scam, escrow taken |
| Jul 2017 | AlphaBay and Hansa | Operation Bayonet |
| Apr 2019 | Dream Market | Announced retirement |
| Aug 2020 | Empire | Exit scam, around $30 million |
| Oct 2021 | White House Market | Voluntary close, withdrawals open first |
| 5 Apr 2022 | Hydra | Seized by German police |
| Mar 2024 | Incognito | Extortion, then a shutdown |
| Jun 2025 | Archetyp | Seized, Operation Deep Sentinel |
| Jul 2025 | Abacus | Exit scam, no seizure banner |
| Sep 2026 | DarkMatter | Exit scam, deposits kept open |
| Oct 2026 | Nexus | Exit scam, keys leaked 7 Oct |
2013 to 2015: Silk Road and the First Wave
Silk Road was seized on 2 October 2013. Ross Ulbricht, who ran it as Dread Pirate Roberts, was arrested as the site came down. The market had opened in early 2011 and was the template: escrow held by the site, vendor reviews, a forum beside the listings. Ulbricht was convicted in 2015 and given a life sentence. In January 2025 he was pardoned. The market did not come back with him.
Silk Road 2 was seized on 6 November 2014, inside Operation Onymous, which took a batch of hidden services at once. The lesson people actually kept was the wrong one. A replacement market, stood up within weeks of the original falling, was treated as continuity. It lasted about a year.
Evolution did not wait to be seized. In March 2015 the admins, Verto and Kimble, disappeared with the escrow. That was the exit scam in the form every later one has copied: withdrawals already failing, then nothing, then a crowd arguing over whether police were simply staying quiet. No banner ever arrived.
2017: Operation Bayonet
AlphaBay went offline on 4 July 2017. Alexandre Cazes, who ran it, was arrested in Thailand and died in custody days later. The seizure was announced on 20 July, the same day Dutch police closed Hansa.
Hansa is the part that changed how a takedown works. Dutch police had already been running it for about a month. AlphaBay's users did what users do: they moved to the next large market, and the next large market was logging them. On 20 July the police stopped pretending and shut Hansa. Operation Bayonet is the seizure that followed people off the seized site, instead of waiting for them to pick a new one on their own.
2019 to 2022: Dream, Empire, Hydra
Dream Market's staff announced a retirement in March 2019 and took the site offline at the end of April. A lot of people read the goodbye as cover for a seizure or a theft, because a calm retirement was not how markets had been ending. The withdrawals were the test. A close that lets people leave with their balance is a different event from one that freezes the door on the way out.
Empire did not offer that test. It exit-scammed in August 2020 and took around $30 million with it. The market had been one of the large English-language successors to AlphaBay. Size was not what saved the deposits.
White House Market, in October 2021, is the clean version of the third ending. It told users the date, left withdrawals open, and then stopped. Hydra is the other pole. On 5 April 2022 German police seized the servers of the dominant Russian-language market. A banner and a press conference, not a missing admin. Those two, a year apart, are the pair to keep: a market can close because the staff decided to, or because someone else took the disks.
2024 to 2026: The Recent Collapses
Incognito closed in March 2024 by turning on its users. As the site wound down, the operator threatened to publish transaction records unless people paid. Rui-Siang Lin, who ran it as Pharaoh, was arrested that May and sentenced to 30 years in February 2026. The market had sold more than $100 million in drugs since 2020. The sentence is not what makes the ending unusual. The extortion on the way out is.
Archetyp was seized between 11 and 13 June 2025 in Operation Deep Sentinel, led by Germany's BKA with Europol. Servers in the Netherlands, the alleged admin arrested in Barcelona, about €7.8 million in assets frozen. It had looked, for a few days, like an exit: a maintenance banner, then a post claiming the admin had been arrested and released. The seizure notice ended that argument. Frankfurt prosecutors charged him on 3 August 2026. At the opening of the trial on 28 September 2026 he admitted founding and running the market. Prosecutors put turnover at about €330 million from November 2022 alone.
Abacus exit-scammed weeks later. Withdrawals failed in late June 2025. The admin, Vito, blamed a DDoS and the crowd arriving from Archetyp. By early July the market was gone, clearnet mirror included, and no police banner replaced it. It had been the largest Bitcoin-heavy Western market. The scramble that followed was the English-language scene's biggest since AlphaBay.
DarkMatter froze withdrawals in mid-September 2026 and kept taking deposits. The admin, posting as Quasar, blamed an attack and called the freeze wallet maintenance. By 14 September the outbound side was still dead. Around 26 September the mirrors stopped loading. No banner, no signed note. Dread pulled it from the Superlist with an exit-scam flag. In January it had been the second-largest market by drug listings, and the admin had called it the oldest still running.
Nexus stalled in the last days of September and was dark by about 1 October. Nobody signed a note, and no agency claimed it. On 7 October the private keys for its onion addresses were public, part of the same week's GoBalance key leak. A dead market with a leaked key can load again, run by whoever holds the key. DarkMatter and Nexus were two of the largest markets, gone inside a month, a year after Archetyp and Abacus had already cleared the top of the 2025 list.
The Pattern: Longevity Is Lower Odds, Not Safety
A market that has run for years without taking the escrow has shown that it did not take the escrow yet. DarkMatter's admin used the length of that run as a credential in the same year he left with the deposits. Silk Road lasted about two years as the market everyone trusted. Evolution was trusted right up to the week the admins vanished. Empire was a successor people moved to because AlphaBay had been the one that got seized, and then Empire took the money itself.
The practical cut is smaller than the history. A balance left on a market is a balance the next ending collects, whether the ending is a banner or a silence. The pages linked above each say what happened to one market. Which markets are still taking orders is a different page, and it goes stale on a shorter clock than this one.
Takedown Questions
What was the first darknet market?
Silk Road, which opened in early 2011 and was seized on 2 October 2013. Smaller boards sold drugs over Tor before it. None of them built the escrow, reviews, and vendor reputation that every market since has copied. Ross Ulbricht was convicted in 2015. In January 2025 he was pardoned.
What is the difference between a seizure and an exit scam?
A seizure leaves someone else's notice on the homepage: a police banner, arrests, a press conference. An exit scam leaves silence. Withdrawals stop, deposits often keep working, and then the site goes dark with no banner and no signed goodbye. A voluntary retirement is the third ending: the staff announce a date, leave a window for withdrawals, and then stop. On the day a market vanishes, the three can look identical. The banner, or the lack of one, is what sorts them.
What was the biggest darknet market takedown?
By the size of the market taken offline, Hydra, which German police seized on 5 April 2022. It was the dominant Russian-language market. By what happened to the people who fled, Operation Bayonet in July 2017 is the one that still matters: Dutch police were already running Hansa when AlphaBay's users arrived, and they closed Hansa on 20 July.
Which darknet markets are active now?
The list changes, and this page does not keep it. The directory is the current set, with what each market sells, which coins it takes, and how its security is set up. A market named on this timeline is here because it ended.