"ODN" has been following the progress of rumors about the "exit scam" of Elude.in, a well-known cryptocurrency exchange mixer and dark web email service provider, and this week the rumors have been confirmed.
Elude Exchange is a cryptocurrency exchange service hosted on the dark web. It is operated by the same team that runs Elude Mail, an anonymous email service on the same website. Elude Exchange supports three cryptocurrencies, including Bitcoin (BTC), Monero (XMR), and Litecoin (LTC). Unlike some other dark web-based exchanges, creating an account is not necessary for conducting exchanges, nor is it necessary to provide a refund address.
Elude is known for its extreme emphasis on privacy, with all of its servers running exclusively on the Tor network. The website does not use JavaScript and does not collect or store data during the exchange process. Elude also offers Bitcoin mixing services for BTC users who wish to break blockchain links. The exchange portion of the website has a simple design but also includes some advanced features to help users maximize their privacy during exchanges and/or mixing.
On April 5th, according to a warning posted by an Elude.in staff member on the Dread dark web market forum in a whistleblower post, the long anonymous BTC/XMR exchange and cryptocurrency mixer, Elude.in, confirmed that it is in the process of an exit scam.
User "elude" has been answering support questions related to Elude.in on the Dread forum for almost five years. On April 5th, in a PGP-signed message posted across multiple sections of the Dread forum, elude candidly stated the status of the long-running service:
"Hello, I'm sorry to say that the Admins have decided to end the Elude project with an exit scam. All withdrawals are disabled. I'm very, very sorry for anybody that has already lost coins. I was messaged about this half an hour ago. DO NOT USE ELUDE!"
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256Hello,
I'm sorry to say that the Admins have decided to end the Elude project with an exit scam.
All withdrawals are disabled.
I'm very, very sorry for anybody that has already lost coins.
I was messaged about this half an hour ago.
DO NOT USE ELUDE!
Hugely sad to see it end this way.
Future communication may be difficult from this account.
Please add the following PGP key, and I will create a new account with which to communicate from:
-----BEGIN PGP PUBLIC KEY BLOCK-----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==
=0wiD-----END PGP PUBLIC KEY BLOCK-----
-----BEGIN PGP SIGNATURE-----iQIzBAEBCAAdFiEENiwojjL3+ZJoLbv91PnJ5+qv5ksFAmQtBhIACgkQ1PnJ5+qv
5ktpXA/8CuSvMnX3tmJK34Fpez2nIU4YBJp5jwwvTjNHdoEHPxeptVd7CLKQEy8Q
D84fYun/uAvaOAYfuzcAB6tBS8BWi74rh7X1nx7BM1ZmF/PiHSaNPHNI85VoLXjh
BzprinQWJALEeVIVJyTdaM5+rNjXnh9z1RSXODGmUq0xZ5kbXWcFRMO0HzcR/6r4
jGsfH2dMI2yab1Bl+89yMtg/TURh03ZsLTevQxxjyImTx7P3NWAeGSRnqN3fpVMF
pgD28O3vYE09NVUe5z90cG7NaEQVkgXuqUJaFCayBJksUmkiTyeahkTklW9LCS0l
gp4ohh6qhiNF+zeOcTpOiJgyfEVwd1UwvHqW6O7sZRpO0QnNhOfpegqnzngPzfR4
VEEGWxqD+JOrrMpJjkqiNXMOCBi+9IruDEtDD72NtItkiCv1XK+ypfgFcbI6lTy/
O5ecoVQV6toe/HCsVenB0MxuQBGp2YhHqYOYB2aWai4veWUXde/N683yyYZZ4UUg
ODxjEtrbgKgjo8jYhc4B9jipIOuMnDDi4K0fvsyFyArLv1AxRUzpumES01qq03Un
dzDE3LG/HuNktlWLbcuh/jH9XR+zMkgAJ0Nn5kHQz4JkVmv8CyIPCI10q0Q0GkA+
f0YT9gU/OQrJ3N41/XuZHLlk4bcgN7Wth4iC5GuNC2amZMtOrI8=
=fa0f
-----END PGP SIGNATURE-----
Source:
http://dreadytofatroptsdj6io7l3xptbet6onoyno2yv7jicoxknyazubrad.onion/post/4423defb104c4a37de7e (section: http://dreadytofatroptsdj6io7l3xptbet6onoyno2yv7jicoxknyazubrad.onion/d/Elude)
http://dreadytofatroptsdj6io7l3xptbet6onoyno2yv7jicoxknyazubrad.onion/post/a5397377d551b1432029 (section: http://dreadytofatroptsdj6io7l3xptbet6onoyno2yv7jicoxknyazubrad.onion/d/Monero)
Although the PGP key used to sign the message has been changed to a new key to prevent the site owner from accessing the Dread account and deleting the whistleblower warning message, senior members and staff of the Dread forum confirmed that the signature is valid and was signed with the old Elude.in key.
Shortly after posting the warning, user elude revealed that they were hired by Elude.in only to provide customer support and did not have access to the website's infrastructure. They also revealed that they were paid $1,000 per week to keep silent.
The user elude has been answering support questions related to Elude.in on the Dread forum for nearly five years. On April 5th, in PGP signed messages posted across several sections of the Dread forum, elude bluntly stated the state of long-running service:
"Hello, I regret to inform you that the administrators have decided to end the Elude project by exiting the scam. All withdrawals have been disabled. I am very, very sorry for anyone who has lost coins. I received the news about this half an hour ago. Do not use Elude! I am very sad to see it end in this way."
Although the PGP key used to sign the message has been changed to a new key to prevent the site owner from accessing the Dread account and deleting the warning messages, senior members and staff of Dread have confirmed that the signature is valid and was signed with the old Elude.in key.
Shortly after posting the warning, the user elude revealed on Dread that they were only hired by Elude.in to provide customer support and did not have access to the site's infrastructure. They also revealed that they were "paid $1,000 a week to keep quiet."
Subsequently, the user FixFull posted the news on Reddit:
Elude[.in] was one of the best (also my fav 🙁 ) services on the Tor network. They offered a .onion mail service, bitcoin mixer and on-site XMR, BTC and LTC swap/wallet. The top mod of the offical /d/Elude subdread made the unfortunate announcement.
Intial post: dreadyt***/post/a5397377d551b1432029
This is a dark day for all of us who utilized this supposedly great service and believed they truly were fighting for us.
The well-known cryptocurrency mixer directory site KYCNOT also removed the directory link to Elude.in on April 5th. In addition, on April 6th, Dark.fail tweeted:
WARNING: Elude's cryptocurrency mixer is reported to be selectively scamming, we are working to confirm.
Elude.in has had numerous complaints about its service in the past, but most issues were resolved shortly after. A few weeks ago, several users of the exchange complained that they had not received their Monero, but most of these issues were resolved, meaning that the decision to "exit the scam" was made recently.
The latest complaint was made 8 hours ago, with one user complaining that they had converted BTC to XMR but were unable to withdraw their XMR. Six hours later, elude responded to the complaint, writing, "I am very sorry, but you won't see your tokens."
Elude.in was once considered one of the most trusted anonymous crypto exchange services on the dark web and has been operating for over five years. In addition to serving as a cryptocurrency exchange and mixer, they also offer a free anonymous email service, which is also popular among dark web users. It is confusing that currently, Elude.in's dark web and clear web sites and all its services are still online, seeming to want to carry out the scam to the end.
Elude.in's dark web address:
http://eludemailxhnqzfmxehy3bk5guyhlxbunfyhkcksv4gvx6d3wcf6smad.onion
Elude.in's clearnet address:
For more dark web news, please follow "ODN".