Since its restart, AlphaBay Market has been deeply trusted by customers, with the number of user registrations continuing to soar, with more than 17,000 merchants and more than 1.24 million buyers. Since the second half of 2022, the AlphaBay market has been subjected to prolonged DDOS attacks and cannot be accessed using the Tor browser, but can be accessed through I2P.
But recently, "ODN" found that customers were confused about the state of the AlphaBay market, as Desnake, the AlphaBay market administrator, had been missing for more than five weeks, and canary, which is used for website signatures, had not been updated. This resulted in AlphaBay Marketplace vendors and users with 2FA enabled (two-factor authentication) being unable to log in to access AlphaBay since February 6. Users with 2FA enabled receive error message "Error: Data signing failed".
This is a mechanism designed for the dark Web marketplace, so it's not the first time this has happened. Back in 2022, the same issue occurred on the AlphaBay marketplace, though it was fixed a few days later when DeSnake logged back in and updated his canary.
dark.fail recently warned on its website: "Alert: AlphaBay's admin disappeared, the site is potentially exit scamming."And tweeted:
AlphaBay, the largest "darknet" cryptomarket, is broken due to an expired admin canary. Core functionality seems to lock by design when its admin DeSnake is away unexpectedly.
Users are unable to deposit cryptocurrency in an unusual situation that does not feel like an intentional exit scam. Arrest, scam, or admin injury? We may never know.
As early as 2021 and 2022, when the AlphaBay market relaunched, DeSnake was active daily, replying to users once an hour, but by late 2022 he had become less active and stopped replying to messages on Dread forums.
It is unclear when and if DeSnake will come back online to fix the problem, so far the vendor has been unable to log into the site and process orders, and users may not notice that something is wrong simply because every time the vendor tries to log in, it appears in his profile that he is indeed online.
While some users can still access AlphaBay through I2P, users who can log in are unable to generate a new XMR deposit address due to the expiration of canary, and the following error is displayed when attempting to generate a new address.
ERROR: Admin must do the monthly canary to enable the signing of deposit addresses/PGP login messages. The error is not critical but please alert us through support ticket if you see this to make sure an administrator signs the monthly canary to prove control of the AlphaBay infrastructure.
Reddit user Boblegal offers some insight.
For those who are in the dark on some information.
The canary is up to date, that is not the issue at hand, as thought before. Nonetheless, the 2fa issue requires DeSnake (head honcho) to log on to fix it (nothing needs to be “fixed”. As far as I’m aware it’s a security protocol where they need his clearance level to sign off on it). As far as the information that’s available, that’s all it takes. But as of right now DeSnakes phone is off - and other admins are making statements such as “we can only hope he decided to go to Disney world/camping trip for the week & turned his phone off”.
It’s a very very simple fix. But the fact is, DeSnake might not log in for 1 hour or 1 week. I believe we are good & it’s as simple as that. Deposits & withdrawal’s have been successful for non 2fa accounts (Confirmed 5 minutes ago).
I suggest people cancel - withdraw - and locate what your looking for elsewhere for now. For those who are able to of course.
We might be in for a ride boys..
AlphaBay market I2P url is: http://tnaefzkcnhryeusi7hdpqujqiqmnbtah3dmjcg3gvezohunjuxbq.b32.i2p
For more Dark Web news, check out "ODN".