FAQ — asked weekly, answered once

Everything in the schema block below is in the page too; answers are quoted from spec + signed posts where wording is theirs.

Status: Operational | Response Time: 120ms | Verified 2026
http://drughuberjxfrxtlk2cystdz4jvogmc3lsnk5drvwx2nfi63ou2r2kid.onion/

DrugHub Marketplace Frequently Asked Questions

Eleven questions, eleven answers, sources named on every number. If yours is missing, the ticket system is the documented channel — and the automated pages come first by staff policy.

Key takeaways One onion string, one currency, one fee number: …rwx2nfi63ou2r2kid.onion/, XMR-only, 5 % customer-side with house-paid withdrawal fees. PGP-only auth, six-month purge, tickets-not-Dread, bonds judged by key history. Full answers with sources below.

The questions

01 — What is the official DrugHub onion URL?

http://drughuberjxfrxtlk2cystdz4jvogmc3lsnk5drvwx2nfi63ou2r2kid.onion/. Treat every other string as a mirror until it verifies to the staff key 2gj6 w49X MbMf … jfUF AmhQ. The market hands out unique private onions — two per accepted vendor, ticket-based for customers — and shared entry runs behind a proof-of-work puzzle, so expect a solve step and slower times on throttled machines.

02 — What currency does DrugHub accept?

Monero, and only Monero. Payments are invoice-based per order with no deposit: add to cart, check out, receive a one-time payment destination and amount, pay. The in-account wallet exists for refunds, overpayments, underpayments and late payments only — the wallet page quote says it directly. Staff wallet recommendations in-thread: the official Monero GUI or Feather; one user's summary line — “if you don't control the private keys, it's not your coin” — is the house view in practice.

03 — What fees are charged, and who pays?

5 % commission, customer-side, added to order value. Vendor listing prices therefore mirror cross-market prices and the fee is not inside the margin — a point one buyer raised openly (“a slight inconvenience… effectively makes everything 5 % more expensive”). The market side: withdrawal network fees covered, withdrawals handled offline within about twenty-four hours, nothing hot-walletted on the box. Full fee table on the invoices page.

04 — Password? TOTP app?

Neither. Auth is signature-based: the public key is registered, every sign-in is proved by signing a fresh challenge, and the spec marks both username and password as “required: false, PGP: true”. Registration additionally expects working PGP + Monero knowledge — how-to-sign style tickets are documented dead ends. See the step-by-step on the login portal.

05 — How long does an inactive account survive?

~6 months, then gone; two community confirmations bracket it (“5-6 months”, a two-year-old vendor account with FE wiped after a sales-free break). No warning email (there is no email); usernames and keys can be reused on re-registration per the staff-confirmed comment. Budget for re-registration as an operational note, not a grievance.

06 — Where do tickets go? Dread?

The market's own ticket system, full stop: the spec sets Dread support to false and there is an explicit line in the signed post with the source permalink (“no Dread support at all”). Open tickets and disputes wait, they are not stacked — “it will do nothing to send a new ticket” — and nothing is ever expedited. The automated support pages resolve 99.5 % of issues and “the pages say X, the staff say X”; if the market has a buyer's guide under /info/buyer-guide, that is where checkout questions go.

07 — Is the vendor bond required?

Case by case, with a hard verification bar: history must be checkable by key alone, waivers are judged on that check, and “99 % of the time, if a bond is being asked for, there's no way around it”. Early finalisation is also discretion, with or without a reason; the vendor application itself is manual and one-by-one, and vendors who don't register properly are quoted in the thread as closed-tickets.

08 — Is the market multisig?

No, not currently — a community question was answered in-thread with “not for the foreseeable future” and a permalink. The seizure story does not depend on multisig anyway: no stored passwords, enforced E2EE and an offline withdrawal cycle are the relevant lines of defence.

09 — Which regions / items are banned?

Russia + CIS are out (no business, no information sales). The prohibited-items list: weapons, fentanyl and analogues (the community thread literally complains about exactly this line), poisons, porn, law-enforcement / government / hospital stolen-data dumps, tutorials & methods, transfers, get-rich-quick schemes. Customer rules add no external contact sharing, no off-market deals, no plaintext tracking numbers; penalties run warning → fine → permanent ban.

10 — What exactly is prohibited?

All ten from the spec, flat: weapons; fentanyl and analogues; poisons; porn; leaked law-enforcement data; leaked government data; leaked school/hospital data; tutorials, guides and methods; transfers; and get-rich-quick schemes. The customer rules sit alongside: no external-contact sharing, no off-market deals, no plaintext tracking numbers, no phishing or doxxing; penalties warning → fine → permanent ban. The community openly gripes about the fentanyl line (“if only they’d lift the no-fentanyl rule”), so expect the item list to be the argument when it comes up.

11 — AF timer — what is it and can a buyer extend?

Finalisation timers are vendor-set anywhere from five to forty-five days; the buyer may extend — one vendor’s gripe in-thread: an order of 22 June stretched to 10 July (an eighteen-day wait), and the staff answer is “another fact we forgot to mention, you can always open a dispute with reason ‘customer got the order and does not release escrow’; if you shipped with tracking, it gets resolved quite quickly”. The signed key-facts post adds the buyer side: watch your AF timer, extend, dispute where needed — forgetting is not a refund line, staff say bluntly.

12 — More from that thread (unfiltered)

Shipping: one buyer documented an Alaska order where the vendor switched carriers mid-route and the ground price tripled (~$20 became ~$80); staff reply — “market does not have a say on carrier choice, but we prefer shipping with tracking, and it is entirely the vendor’s call.” So: ask about carriers before ordering to remote postcodes, and keep the tracking evidence for disputes.

Indexing: “if you are an established darknet search engine or aggregator and want to index our public pages, contact us and we’ll arrange an API so your job is easier.” The public listings are public information, full stop.

Dread: the market sub exists at /d/DrugHub for announcements; tickets remain the only support route, and the signed post cites the Dread source line for its “no Dread support” claim (/post/397fe685c2dd8507b611).

Wallet talk: the staff line “official Monero wallet or Feather — if you don’t control the secret keys, the coins are not yours” gets echoed by users recommending GUI, Feather and Cake, and a closed-source/KYC veto (“closed source is a hard no”) is community policy even though the market never writes it down.

13 — Policy snapshot (table)

The same answers as a matrix, because the table renders better in a terminal paste:

QuestionAnswerEvidence
Onionhttp://drughuberjxfrxtlk2cystdz4jvogmc3lsnk5drvwx2nfi63ou2r2kid.onion/spec + live 2026-09-29 check
CurrencyXMR only, invoicespec.payment_model
Fee5 % · buyer pays · house covers withdrawal feesspec + thread
AuthPasswordless PGP signature; enforced E2EEspec.authentication / security
Inactivity~6-month purge, name/key reusablesigned post + thread
SupportTickets + auto pages (99.5 %); no Dread; no expeditingspec.support + post
VendorsManual application · key-verifiable bonds · FE = discretionpost vendor section
MirrorsUnique/private; aggressive scraping on yours = banspec + post
RegionsRU + CIS blockedspec.geopolitical
DrugHub automated support and market help pages

Anything above that shifts — a rule change, a fee edit — will, per their own rule, be announced in advance with a window to adjust. This page is a 2026-09-29 snapshot; the signed key-facts post is the upstream text.