Cyber Security News

Abacus Dark Web Market Possible Exit Scam with the Bitcoin Payments They Hold

Abacus Market, the largest Bitcoin-enabled Western darknet marketplace, has likely executed an exit scam after going offline in early July 2025, according to blockchain intelligence firm TRM Labs. 

The marketplace’s operators appear to have disappeared with users’ cryptocurrency funds, marking another significant blow to the Western darknet ecosystem following the law enforcement seizure of Archetyp Market in June 2025.

Key Takeaways
1. Abacus Market went offline in early July 2025 and likely disappeared with users' cryptocurrency funds in a classic exit scam.
2. Daily deposits dropped 94% from USD 230,000 to USD 13,000 after users reported withdrawal issues in late June 2025.
3. The platform generated USD 100 million in Bitcoin sales, with total estimated revenue of USD 300-400 million, including Monero.
4. Following Archetyp's June seizure, remaining platforms face pressure to absorb displaced users amid increasing darknet instability.

Abacus Market: Exit Scam Executed

Users began reporting withdrawal problems with Abacus Market in late June 2025, a classic indicator of an impending exit scam. 

The marketplace’s administrator, known by the pseudonym ‘Vito’, attempted to reassure the community through posts on darkweb discussion forum Dread, claiming that an influx of former Archetyp users and distributed denial of service (DDoS) attacks were causing the technical difficulties.

Despite these explanations, the darknet community remained skeptical, leading to a dramatic 94% decline in deposit volumes. 

Between June 1 and June 27, 2025, average daily deposits to Abacus totaled USD 230,000 across 1,400 transactions, but this plummeted to just USD 13,000 across 100 deposits from June 28 to July 10, 2025. 

This sharp decrease in user confidence preceded the marketplace’s complete disappearance from all internet-facing infrastructure, including its clearnet mirror.

Abacus Market operated as a central deposit wallet, multisignature darknet marketplace supporting both Bitcoin and Monero cryptocurrencies. 

Unlike competitors such as Archetyp, DrugHub, ASAP Market, and Incognito Market, Abacus’s technical architecture allowed for more sophisticated payment processing and escrow services. 

The platform’s success was reflected in its growing market dominance, rising from 10% market share in 2022 to over 70% in 2024.

TRM Labs analysis indicates that Abacus generated nearly USD 100 million in Bitcoin-enabled sales alone. 

However, considering that Monero typically accounts for two-thirds to three-quarters of total darknet marketplace volume due to its privacy features, Abacus’s actual sales volume likely reached between USD 300 million and USD 400 million.

The collapse of Abacus Market highlights the ongoing volatility in the Western darknet ecosystem, where sustained law enforcement pressure has created an environment of constant uncertainty. 

Nearly half of the marketplaces launched in 2024 accepted only Monero, representing a sharp increase from just over one-third in 2023, signaling a growing preference for enhanced privacy and anti-surveillance capabilities.

With Abacus’s departure, remaining platforms such as DrugHub, TorZon Market, and MGM Grand face increased pressure to absorb displaced users while navigating the same risks that led to their predecessor’s downfall.

Investigate live malware behavior, trace every step of an attack, and make faster, smarter security decisions -> Try ANY.RUN now 

Kaaviya

Kaaviya is a Security Editor and fellow reporter with Cyber Security News. She is covering various cyber security incidents happening in the Cyber Space.

Recent Posts

OpenAI Launches GPT-6 Cyber That Finds 81 Firefox Flaws and Develops 948 Linux Exploits

OpenAI has launched GPT-6 Cyber, a security-focused AI model that found 81 new high-severity Firefox…

4 hours ago

Shopify Mandates IP Allowlisting for Public Apps to Prevent Unauthorized Admin API Access

Shopify is making IP allowlisting mandatory for public apps that call its Admin API, adding…

5 hours ago

Microsoft Paint 0-Click Vulnerability Could Allow Hackers to Take Control of Windows PCs

Microsoft’s Windows Paint vulnerability, CVE-2026-83844, could allow an unauthenticated attacker to execute code over a…

5 hours ago

OpenMatter Network Positions Decentralized Computing as an Alternative to Data Centers for AI

Melbourne, Florida, November 5th, 2026, CyberNewswire OpenMatter Network, a pioneer in decentralized infrastructure for agentic…

13 hours ago

GhostMap Android Flaw Can Trap Phones in Endless Reboot Loops Without Opening an App

A new Android bug named GhostMap can leave a phone stuck in a crash loop…

14 hours ago

Hackers Turn Popular Chinese Keyboard Software Into a Backdoor for Cyberespionage Attacks

A China-aligned hacking group is abusing Sogou Input Method, one of the most popular Chinese…

15 hours ago