DrugHub Vendor Registration, Bonds & Operations
Vendor Policy Summary
- Manual Application Vetting: Vendor applications are evaluated manually on a case-by-case basis by DrugHub administration.
- Bond Waivers: Established vendors from collapsed platforms (e.g., Archetyp, Bohemia, Abacus) can qualify for bond waivers, verified strictly by PGP key signatures.
- Mandatory E2EE Enforcement: Plaintext communications containing PII or tracking numbers are strictly prohibited. Violations lead to permanent bans.
- Private Mirrors & Employee Accounts: Approved vendors automatically receive 2 dedicated private mirrors and can delegate sub-accounts to staff without revealing master PGP keys.
- 1. Vendor Onboarding & PGP Bond Waiver Criteria
- 2. Platform Rules & Prohibited Items Matrix
- 3. Mandatory End-to-End Encryption (E2EE) Communications
- 4. Employee Accounts & Sub-Permission Management
- 5. Flexible Auto-Finalize Timers (5 to 45 Days)
- 6. AutoSweep Offline Monero Withdrawals
- 7. Deploying the DrugHub Encryption Helper Tool
1. Vendor Onboarding & PGP Bond Waiver Criteria
Following recent migration surges across the darknet ecosystem, DrugHub has welcomed hundreds of established vendors. To prevent scammers while accommodating legitimate merchants, vendor applications are processed individually.
To apply for a vendor account:
- Register a standard buyer account via DrugHub PGP Login using your master vendor PGP public key.
- Navigate to the Vendor Application tab under account settings.
- If you are an established vendor from a defunct market, submit proof of vending history signed with the same PGP key.
- Staff verifies your PGP key against historical scrapes. If verified, the standard vendor bond may be waived at staff discretion.
2. Platform Rules & Prohibited Items Matrix
DrugHub maintains zero tolerance for activities that endanger buyer safety or violate market ethics:
| Rule Category | Prohibited Actions | Enforcement Consequences |
|---|---|---|
| Prohibited Items | Weapons, fentanyl/analogues, poisons, non-consensual media, stolen LE data, tutorials/transfers. | Immediate permanent ban & loss of vendor bond. |
| Off-Market Deals | Posting Telegram, Jabber, or email in bio/PMs to bypass market escrow. | Account restricted, fined, or permanently banned. |
| Plaintext PII | Sending unencrypted postal addresses or tracking numbers in open chat. | Warning issued; repeat offenders banned. |
| Banned Regions | No shipping to/from Russian Federation or CIS countries; no sale of CIS personal data. | Immediate account termination. |
3. Mandatory End-to-End Encryption (E2EE) Communications
Unlike legacy platforms that offered optional auto-encryption scripts stored on market servers, DrugHub enforces true End-to-End Encryption (E2EE).
Messages between buyers and vendors are encrypted locally on the sender's device using the recipient's public PGP key. Market servers only relay the encrypted text. In the event of server seizure, plaintext communications cannot be recovered by law enforcement.
4. Employee Accounts & Sub-Permission Management
Large vending operations often employ customer support or shipping personnel. On legacy markets, vendors were forced to share their master account password and private PGP key with employees.
DrugHub introduces Employee Sub-Accounts. Master vendor accounts can create restricted employee logins and assign granular permissions (e.g., "Manage Order Chats" or "Update Stock Levels") while locking access to sensitive areas such as PGP settings, payout addresses, financial ledgers, and AutoSweep configs.
5. Flexible Auto-Finalize Timers (5 to 45 Days)
To prevent vendor working capital from being trapped in escrow while inactive buyers forget to release funds, DrugHub allows vendors to set flexible Auto-Finalize (AF) timers ranging between 5 and 45 days based on shipping destination profiles (e.g., domestic vs international express).
Buyers retain the ability to extend the AF timer by up to 14 days or initiate a formal dispute if packages are delayed.
6. AutoSweep Offline Monero Withdrawals
Vendors can configure AutoSweep in their account panel. Once cleared escrow balances reach a predefined Monero threshold, the system automatically initiates a withdrawal to the vendor's designated external wallet.
Crucially, AutoSweep payouts are signed and executed from offline cold storage within 24 hours—ensuring market web servers never retain hot wallets.
7. Deploying the DrugHub Encryption Helper Tool
Vendors managing dozens of daily orders can deploy the official DrugHub Encryption Helper reverse-proxy script in Python or Go on Tails OS, Whonix, or Qubes OS.
This local tool integrates directly with the GnuPG backend to automatically decrypt customer messages and format encrypted replies transparently in the browser, eliminating tedious manual copy-pasting while maintaining strict E2EE security.