Darknet’s second largest market is at the center of the exit scam. The nightmare market turned off all withdrawals and start to change supplier passwords after a week-long service period.
It all started a week ago when Nightmare had problems getting Btc out. Many users complained about withdrawals from their accounts, but never received anything. A well-known drug supplier “StrongWeed” created a branch about fear and some other forums on the issue of withdrawing from 1 btc (about $ 11,000 at that time). According to StrongWeed
I’ve withdrawn 1 BTC from Nightmare at July 7 and bitcoin never arrived to my wallet. When I ask to support they give me a txid but that is not my BTC address. I’ve never seen that money. On blockchain it’s all good with their txid. Money reached to an address. I’ve heard for deposit problems but this is so weird. What’s going on!?
The problem did not end there. The next day, we began to receive reports that users send deposits to their bitcoin addresses, but their balance weren’t updating.
Most users believe that the complaints are not genuine and that their accounts should be phishing. One user said: “At some point, you got phishing, you were out of luck with the coins… activate 2fa so you don’t worry about it.” Another user said: «Where did you get the link you used to access Nightmare? You are very likely to be phishing».
Keep in mind that phishing is a huge problem in the darknet world, and phishing is very common, so most people think that it is somehow related to phishing.
The Real Problem
The phishing excuse did not last long, as complaints grew every hour. Now everyone began to think that something was happening. Either the market is planning to get out of fraud, or it has serious problems with their bitcoin system. Many theories about the situation were presented at various forums, but no one knew what was going on behind the scenes. All they could do was share their opinions and nothing more.
Darknet situation is very volatile. Whenever something unusual happens, it gives rise to various theories and panic covers the whole situation.
The Delaying Tactics
After receiving a large number of complaints, Nightmare employees recognized the problem and assured their users that they were not going anywhere, “this is just a small problem, no need to worry.”
According to Nightmare Sandman
NIGHTMARE MARKET TO FIX ALL CRYPTO – ONCE AND FOR ALL!!
We want everyone to know we are fully aware of the issues regarding our transactions. We know we are also 1 of the largest markets at the moment, we greatly appreciate your support for that!
We want to stress a few points:
0. We are NOT planning an exit, never. We are here to stay!
0. You WILL get all your coins and be able to buy and sell!
Now that we have that out of the way, we are planning a major overhaul on our financial system the next week, this means:
We will disable deposits for XMR, BCH, DASH, LTC and ZEC.
BTC deposits will remain active! ( for all coins; withdrawal and buying with what you already have or earn will remain active 100%, we do not want to take anything away from you!)
We will start with all open deposits and credit them to the designated owner. We will take 24h to 48h to do so. This way everyone who has an existing deposit issue will be helped first!
The second step will be extremely upgrading our financial system, starting with BTC. Make it more secure, make it 100% reliable, NO MORE ISSUES!
We will systematically follow up with every single coin.
Now.. this may take a week or so before all coins are active for deposit again so please be patient.
Some key take-aways;
? Withdraw and spending for all coins will remain 100% active
? BTC deposits and withdraw remains 100% active throughout this period (except for a BTC maintenance period, but we will update you on this)
? Every single person will get their money and be able to happily buy and sell!
We are not planning to have the same issues as other market such as Dream had at the time where your XMR is just gone. We will NOT allow this to happen!
So, please support us, we are here for you and hopefully this makes you realise we are not out to take anyone’s money. No, we are here to build the largest and safest marketplace on the Darkweb!
After this announcement, employees turned off the deposit and withdrawal of bitcoins, but in reality they just turned off the withdrawal of funds, and deposits still worked, and unsuspecting users were deprived of their bitcoins in this long saga this week.
The Ending & The Hack Drama
A few days ago, topics with the headline “I think you were hacked” began to appear on dread forum. The person who claims to have hacked vendor accounts by the name ithinkyougothacked – has published lists of the first and last words of the vendor’s mnemonics. Some vendors have confirmed a match between the words published by the alleged hacker and the 14 words that they saved when creating their account.
It seemed that the hacker had full access to the market, because without full access he could not provide something as important as the mnemonics. Please keep in mind that this is a so-called hacker. We cannot confirm whether he is a hacker or the market administrator himself.
Contact With The Hacker
Darknet markets are teeming with rival disinformation campaigns. We wanted to confirm the hack by ourselves, so we contacted the hacker using a secure chat server. In our conversation, the hacker gave us several screenshots of the server part of the market, which showed confidential information about the market and its users.
We’re not sure why Nightmare’s employees kept internal communication unencrypted and open? Below is a screenshot showing conversation between nightmare market employees.
The hacker also shared Nightmare statistics, including total sales and deposit balance.
Below is a screenshot that clearly shows Nightmare’s daily sales and pending withdrawals.
Current Nightmare Market Situation
The Nightmare Market Index page is currently displaying a maintenance page with the message “We are doing maintenance to improve the market.” We will be back soon. Nightmare Market Team. ” This means only one thing, they are gone forever.
We received a statement from a Nightmare Sandman employee about the alleged hack. According to him.
- No hack happened
- A rogue admin used support login to steal user funds
- Used a support login account to lockout vendors and steal their funds
- That same admin was behind all the hack posts on different forums
Here is his complete statement.
NIGHTMARE – WHAT REALLY HAPPENED!
Here we go..
Oke so, there have been many speculations and many articles about hacks and such.
Sorry guys, it’s not true, we were never hacked, and we can proof this solid, with the logs.
Here is the real story, that we do not like to share but in the light of everything, you deserve to know:
The admin; Creative, tried to steal from us…period. He was not part of the team anymore because of private reasons. But for the safety and continuation of the market we had to move on without him.
This resulted in him trying to steal money from the market through fake vendor accounts and eventually gaining access to a support member account (with partial info he saved from that account when he was still admin).He then followed to lock vendors and take over their account, which an admin can do and subsequently empty their wallets. This has resulted in him literally stealing funds.
As if this was not enough he then made screenshots of market specific data to post it under the motto! I HACKED THEM.
‘They were planning an exit strategy’
Now, let me make something very clear. We are NOT and NEVER HAVE planned an exit. And we WILL pay every cent that the affected accounts have lost from our own pockets.
And this my friends, is what really happened.
We apologize for all the things that have taken place in the last 24h and unfortunately our attempt to keep the team save has resulted in funds being stolen and hacks being claimed. It is literally impossible because after Creative was off the team we immediately moved every single bite of the market to a new server of which he had no data nor access.
To those who believe in us, please understand that we never meant for this to happen and we will do whatever is in our power rectify this, even as I said before, paying back what was lost from our own pockets.
We have been reading things like:
‘Inevitable exit scam’ or ‘waiting until there is enough and the make our move’ I dare every single person who claims this to proof that any single one of our team-members has ever said this. Except for creative maybe
Either way, you will all see…we wills still be here tomorrow…the day after, and the days after that.
Thanks for reading,
Update Friday, July 26, 2019 – The Nightmare is back online again. Currently, its receives deposits only from unsuspecting users. A common tactic used by exit fraudsters to maximize profits. On the other hand, old users can see their old balance at the entrance to the system, but whenever they try to withdraw their bitcoins, they get a withdrawal pending message.
Nightmare Market Alternative
What will happen next for darknet users? It’s time to accept the loss and move on to a better market. Darknet users are used to this kind of situation, so they recover from it very quickly.
The next best market in terms of speed, accessibility, security and reliability, of course, is the Samsare market. Samsara is the fastest growing market now and is considered the next best thing. As always, we advise you to be careful when using darknet markets. Always use pgp and keep your information safe