The wet-concrete side of the darknet has one rule — verify before you enter. This page holds the signed .onion addresses for Drughub, the Monero-only marketplace built by former White House Market operators. Copy once. Check twice. Open in Tor.
Loading...
Drughub markets itself on mechanics, not marketing. The Lab Verification Program and the walletless invoice flow are the two reasons people moved here from platforms with bigger ad budgets. Here is what that means in practice.
Third-party laboratories test 90% of Drughub listings. Results cover purity, contaminants, and weight accuracy. Each verified product carries a badge:
No other major darknet marketplace runs independent testing at this scale.
No platform wallet. No deposit step. Every order generates an encrypted invoice and payment flows straight into 2-of-3 multisig escrow. Drughub never takes custody of your Monero.
This is the single biggest structural difference from markets that collapsed after operator failures. The money simply isn't there to steal.
Authentication uses a 4096-bit PGP key only. There is no username-plus-password to phish, guess, or credential-stuff. Your session depends on a cryptographic key you hold.
Combined with PGP-based 2FA — no SMS, no TOTP apps — the login surface is the narrowest on any major market in 2026.
Drughub accepts XMR. Not Bitcoin, not Litecoin, not stablecoins. The decision is deliberate — Monero uses ring signatures, stealth addresses, and RingCT to hide sender, receiver, and amount at the protocol level.
Bitcoin's public ledger is the opposite of that. If you bring BTC, you're told to swap it first.
No order logs. No saved shipping addresses. No chat archives. Every message runs through P2P end-to-end PGP encryption, so even Drughub's infrastructure cannot read it.
If servers were ever seized, the data pulled off disk would be noise. That is the threat model — and it's EFF-grade.
Darknet markets live under constant DDoS. Drughub's END GAME filtering keeps the gateway on 98.8% of the time — above market average. When one node goes under, the mirror list stays reachable.
That is the whole reason multiple .onion addresses exist on this page. Bookmark more than one.
A working session on Drughub starts before you touch the link. Tor Browser, a cold Monero wallet, a fresh PGP keypair, and a clean browsing profile. Here is the procedure. Skipping a step is how people end up on phishing clones that match the real interface pixel for pixel.
Open torproject.org on a clean connection. Download Tor Browser for your operating system. Verify the PGP signature before launching — the Tor site documents the procedure and publishes the signing keys. Never pull Tor from a random mirror, app store, or search ad.
After install, raise the security slider to Safest. This disables JavaScript everywhere except sites you whitelist manually. Drughub runs fine without JS.
Install Monero GUI, Feather Wallet (desktop), or Cake Wallet (mobile). Generate a fresh wallet. Copy the 25-word seed to paper — never to a cloud note. Never transact from an exchange wallet directly; always withdraw to your own wallet first.
Fund it with XMR from a reputable source. Let the funds settle for ten confirmations before you move them again. Rushing this step is how people get tagged by heuristics.
Use GnuPG on Linux/macOS or Kleopatra on Windows. Generate a 4096-bit RSA key tied to a throwaway identity — no real name, no personal email. Set a strong passphrase and store it in KeePassXC.
Your public key goes on Drughub. Your private key stays on your device — ideally on an encrypted volume via VeraCrypt. Back it up offline. Treat it like a house key.
Scroll to the Portals section below. Click Copy next to the primary gateway or any mirror. Do not type the address by hand — one wrong character lands you on a phishing clone. Always paste, never retype.
If you want to verify independently, check Drughub's latest PGP-signed announcement on the Dread subdread. Match the onion strings character for character.
Open a new tab in Tor Browser. Paste the link. Press Enter. The first connection to Drughub takes longer than a clearnet site — Tor routes through three relays by default. Twenty to ninety seconds is normal.
A captcha appears on first load. Solve it, tick the Terms, and continue to the register screen.
Pick a username that has zero overlap with anything you've used elsewhere. Set a withdrawal PIN. In the 2FA section, paste your PGP public key — Drughub uses PGP-challenge login, so every sign-in sends you an encrypted message to decrypt with your private key.
Read the marketplace rules page before you click through. Drughub enforces vendor rules strictly and the rules are short — it takes four minutes.
Bookmark the primary link in Tor Browser. Bookmark the mirror too. Close every other tab. A dedicated Tor profile with nothing else running is the cleanest browsing model.
For deeper isolation, move the whole session to Tails OS or a Whonix workstation. Tails boots from USB, leaves nothing behind, and routes every byte through Tor by default.
Clean dark theme, no JavaScript required, minimalist controls. Here are the screens you hit in the first ten minutes of a session.
Selected from 2,663 PGP-signed reviews across the last nine months. Handles redacted; public keys verified.
"Moved across from another market after the Lab Verification rollout. Ordered a test batch, it matched the posted purity to the decimal. That alone is worth the hassle of swapping BTC for XMR every time."
"Walletless is the right call. I left a platform with $1,247 locked when it exit-scammed in 2022. Drughub never has my money in its custody, which is exactly what I want from an escrow service."
"PGP-challenge login took me an afternoon to get comfortable with. Worth it. No stolen-password surface, no SMS to intercept. The onboarding friction is the point — it filters out casuals and most automated attacks."
"Uptime isn't perfect, which is honest. Primary went dark for half a day in March. Mirror was up the whole time. That's the reason you keep more than one bookmarked on a market this size."
Snapshot from April 2026 — compiled from public subdread reports, PGP-signed market bulletins, and the portal's own audit page.
Cumulative since the August 2023 launch. Daily actives average 12,800 on weekdays, closer to 18,400 on Sundays.
Roughly 35% of vendor applications pass the PGP-identity and history review. Rejection rate is deliberate.
Of those, 12,138 carry a Lab Verification badge. The remainder are restricted categories without lab partners.
Over the last 90 days. Two unscheduled outages — one DDoS, one clearnet-bridge misconfiguration.
| Metric | Drughub | Darknet market avg. | Source |
|---|---|---|---|
| Payment coins | XMR only | BTC + XMR | Market bulletins |
| Lab-verified listings | 90% | <5% | Drughub audit |
| Walletless checkout | Yes | Rare | Dread subdread |
| PGP mandatory | Yes | Optional | Vendor rules |
| Average uptime | 98.8% | 91.4% | Third-party pingers |
| Dispute-to-order ratio | 0.94% | 3.2% | Platform feed |
Answers on security, payments, mirrors, and the Lab Verification Program. Cross-linked to the setup guide where a topic needs more space.
Drughub is a privacy-focused darknet marketplace launched in August 2023 by the team behind White House Market. It runs exclusively on Monero, requires PGP encryption on all transactions, and uses a walletless invoice system that never holds user funds. The platform's flagship feature is the Lab Verification Program — third-party laboratories test 90% of listings for purity, contaminants, and weight accuracy.
You need Tor Browser, downloaded from torproject.org. Raise the security slider to Safest. Copy one of the verified .onion links from this page — never type it by hand. Paste into Tor Browser. Wait for the connection; twenty to ninety seconds is normal on first load. For deeper OPSEC, run the session inside Tails OS or Whonix. See the full seven-step procedure for the complete checklist.
Monero uses ring signatures, stealth addresses, and RingCT to hide sender, receiver, and amount at the protocol level. Every XMR payment is private by default. Bitcoin's public ledger is the opposite — every transaction is permanently traceable by anyone with chain-analysis software. Drughub chose XMR for both sides of the trade. There is no exception for BTC. Swap first via Monero's merchant list or a reputable exchange.
Third-party laboratories test 90% of listings. Results cover purity, contaminants, and weight accuracy. Verified products receive one of three badges — Gold, Silver, or Bronze — based on the depth of testing performed. The reports are attached to the listing, and vendors who falsify batches are removed with no refund path. No other major darknet marketplace runs independent testing at this scale. This is the single biggest reason buyers cite for moving to Drughub.
Drughub uses 2-of-3 multisig escrow. The buyer, the vendor, and the platform each hold one key. Any two keys can release funds. This structure means platform administrators alone cannot move money — they would need collusion from either the buyer or the vendor. Combined with the walletless invoice flow, the platform never holds custody in the first place. That is a structurally different model from the platforms that collapsed in past exit scams.
Yes. Mirrors are exact clones running on different infrastructure. They exist so the market stays reachable during DDoS events or scheduled maintenance. All mirrors on this page are PGP-signed by the Drughub team in their Dread announcements. If a link on this page does not match the latest signed bulletin, treat it as compromised. Bookmark two or three addresses — one always resolves.
No logs. No saved shipping addresses. No chat archives. No order history beyond the escrow window. Every message runs through P2P end-to-end PGP encryption, so Drughub's own servers cannot read it. If infrastructure were seized in a law-enforcement action, what would be pulled off disk is noise. This is the same threat model Privacy Guides advocates for sensitive services — minimize the attack surface by minimizing stored data.
Buy XMR on an exchange (Kraken, LocalMonero, one of the Monero-accepting merchants), then withdraw to a self-custody wallet — Monero GUI, Feather Wallet, or Cake Wallet. Never transact directly from an exchange wallet. Let withdrawals settle for at least ten confirmations. Then fund your Drughub invoice straight from your own wallet. Keep the seed phrase on paper in a place you control.
Three structural differences. First, Lab Verification on 90% of listings — independent purity and contaminant testing no competitor offers. Second, walletless payments — the platform never holds custody, which removes the exit-scam surface entirely. Third, Monero-only policy — ring signatures, stealth addresses, RingCT at every step. Most competitors still accept Bitcoin, hold funds in platform wallets, and offer no lab testing. These three choices define the market.
Phishing sites copy Drughub's interface exactly. Check every character of the .onion address. The wrong link costs more than the time to verify. These addresses are PGP-signed by the Drughub team on the Dread subdread and re-verified every six hours.
Loading...
Loading...
tor:// or the onion icon should appear.Want the full mirror list plus historical rotations? Visit the mirror list page. For the walk-through, see the setup guide. For brand context, read the Drughub overview.
You've read the dossier. The portal is signed, the mirror is up, and the procedure is in your clipboard manager. Bookmark this page. Come back before every session. The address rotates, the file stays.
Secondary reading · EFF · Proton Mail · Signal · Mullvad VPN · DuckDuckGo · Briar · OnionShare · Qubes OS · I2P