All 9 active Tor shops we cover. Pick one to see the current onion address, mirrors and a plain read of how the shop works.
Verified: 15 August 2026 · Data source: operator PGP-signed rotations
Logos open the market page with the current onion address and the working mirror list.
Same data as the cards above, in table form for quick comparison.
| Market | Since | Coins | Mirrors | Region | Best for |
|---|---|---|---|---|---|
| Nexus Market | 2023 | BTC, LTC, XMR | 3 | Global, English | Top overall pick |
| Anubis Market | 2024 | BTC, LTC, ETH, XMR | 3 | Global, English | Best for multi-coin payments |
| TorZon Market | 2022 | BTC, XMR | 5 | Global, English | Anti-DDoS queue at the door |
| Awazon | 2024 | BTC, XMR | 3 | Global, English | Best for first time buyers |
| WeTheNorth (WTN) | 2021 | BTC, XMR | 3 | Canada, EN and FR | Best for Canada, EN and FR |
| Osiris Market | 2024 | BTC, XMR | 3 | Global, English | Best for resilience |
| Crown Market | 2024 | BTC, XMR | 3 | Global, English | Best looking interface |
| Mars Market | 2023 | BTC, LTC, XMR | 3 | Global, English | Most onions live at once |
| BlackOps Market | 2024 | XMR | 3 | Global, English | Monero only, privacy first |
Every entry above earned its place by clearing three checks. First, the operator publishes each mirror rotation as a PGP-signed message using the same key that has signed every rotation since the market opened. We import that key once and verify every future announcement against it. If verification fails, the address does not go up here. Second, the market runs a working multisig escrow flow on the primary payment coin, so a compromised operator cannot walk with pooled buyer deposits. Third, the shop keeps at least one backup mirror live at any time so that a single DDoS wave never takes the whole marketplace offline.
Reviews on this site are not paid, ranked by affiliate revenue or influenced by the market operators. The eight shops on this page are the only ones we currently cover. When one of them stops meeting the three checks above, it comes off the list without ceremony. When a new market shows up on Dread and holds through a couple of rotations, we start watching it. If it holds for three months, it moves onto the directory.
Rotation dates on this page match the last PGP-signed announcement each operator has published. When we spot a stale address, it is replaced within the same day the operator retires it. The audit trail is public because the PGP verification is a mechanical check any reader can run themselves. Nothing on this page relies on us being trustworthy.
Markets where XMR is the default at checkout.
Fee-adjusted picks for small orders.
Every market on one long comparison table.
A shop that only opens through a Tor Browser onion address. The site itself is hosted as a Tor hidden service so it never reveals its physical location, and the buyer connection is anonymised end to end.
An extra onion address for the same shop. Every market on this directory runs multiple mirrors on rotation so that a single address being attacked never takes the whole shop offline. Your account is the same on every mirror.
Two checks. Compare the full 56-character onion address against the operator PGP-signed rotation announcement. Then, once on the login page, compare the address printed inside the login captcha image against your address bar. Both must match.
Monero when the market accepts it. Monero hides the sender, receiver and amount so nothing on the public chain shows the purchase. Bitcoin works but leaves a public trail. Litecoin is convenient for smaller orders because confirmations arrive faster than Bitcoin.
Eight active Tor markets in 2026. We keep the list short on purpose. Every entry has been running long enough to build a track record, and every mirror is PGP-signed by the operator so verification is possible.
Every deposit sits behind three keys held by buyer, seller and market. Any two together can move the coins. The market alone cannot exit-scam because it only holds one of the three keys. All eight markets on this page use multisig by default.
Whenever an operator publishes a PGP-signed rotation. Typical cadence is a few weeks per mirror, faster during active attack waves. We re-verify every 24 hours and swap stale addresses out the same day the operator retires them.
Usually a heavier DDoS wave. Try New Tor Circuit for this Site in Tor Browser and wait ten minutes. If every mirror is still down, refresh this page for the current rotation. Never accept mirror addresses from Telegram or Reddit during outages, that is where phishing peaks.
