Cryptocurrency [loss] $20M+

Incognito Darknet Market Mass-Extorts Buyers, Sellers

2024-03-11 [vendor] Incognito Market exit [chain] bitcoin, monero
Primary Source ↗
Financial Loss $20.0M (20,000,000 USD)
Blockchain(s) Bitcoin, Monero

Incident Details

Since March 5, those who used the Incognito Market darkweb narcotics marketplace have found themselves unable to withdraw the Bitcoin and Monero they had on the platform. It appeared the platform had exit scammed for somewhere between $10 and $30 million.Making matters worse, on March 10 the website posted a message reading, “Yes, this is an extortion !!” They wrote that, although the platform promised to “auto-encrypt” messages between buyers and sellers, and auto-delete after an expiry date, messages were not encrypted or deleted. They demanded that users pay an additional $100 to $20,000 to have their information removed from the dataset, which they promised to release at the end of May. “Whether or not you and your customers’ info is on that list is totally up to you.“The tactic is reminiscent of that of ransomware groups, which often demand double fees: one from victims of hacks first to regain access to their systems, and another in exchange for a promise to destroy stolen data.

Total loss estimated at $20,000,000.

Technical Details

Initial Attack Vector
Exit scam / rug pull
Vendor / Product
Incognito Market exit

Timeline

  1. 2024-03-11 Breach occurred
  2. 2024-03-11 Publicly disclosed