Operational Documentation
Protocols for market access, Monero settlement, PGP encryption standards, and dispute resolution mechanisms.
Access & Identity
BlackOps Onion serves as the authenticated entry node and documentation hub for the BlackOps Marketplace. We provide cryptographically verified V3 .onion mirrors, PGP public keys, and security protocols. This gateway exists to mitigate man-in-the-middle attacks and ensure users connect only to signed, legitimate market infrastructure.
Access is strictly limited to the Tor Network via the Tor Browser (v13 or later). Users must configure their browser to 'Safer' or 'Safest' security levels, disabling JavaScript where possible. Navigate only to mirrors signed by the Admin PGP key, listed on our verified Links page. Never attempt access via clear-net proxies or standard browsers.
Registration is open and operates on a zero-knowledge basis. No email, phone number, or PII is required. Upon registration, the system generates a unique 12-word mnemonic seed phrase. This phrase is the sole vector for account recovery; if lost, the account and funds are cryptographically inaccessible, even to administrators.
Buyer accounts are free to create with no wallet activation fees. Vendor accounts require a non-refundable bond payment in Monero (XMR) to deter spam and ensure vendor quality. This bond is waived for established vendors migrating from other markets with verifiable PGP identities and reputation history.
Cryptography & OpSec
Verification must be performed cryptographically using PGP (Pretty Good Privacy). Import the BlackOps Admin Public Key into GnuPG or Kleopatra. Verify the signed message containing the current mirror list found on the /mirrors endpoint. Additionally, verify your personal anti-impersonation phrase and the visual hash pattern presented at every login session.
PGP ensures end-to-end encryption (E2EE) for all sensitive data. Shipping addresses and communication logs are encrypted client-side before transmission, ensuring that even if the server is compromised, user data remains unreadable. PGP is also required for 2FA login challenges, securing accounts against password breaches.
2FA on BlackOps utilizes PGP encryption rather than SMS or Apps. Upon login, the server presents a random alphanumeric string encrypted with your public PGP key. You must decrypt this message using your private key to reveal the token, which is then entered to authorize the session. This proves ownership of the private key.
Financial Protocol
We operate exclusively with Monero (XMR). Unlike Bitcoin, Monero enforces privacy at the protocol level using Ring Signatures, RingCT, and Stealth Addresses. This obfuscates the sender, receiver, and transaction amount, rendering blockchain analysis ineffective and protecting user financial sovereignty.
Funds for purchases are held in a secure, intermediate market wallet (Escrow) rather than being sent directly to the vendor. The vendor is notified to ship. Once the buyer confirms receipt and product integrity, they release the funds to the vendor. Auto-finalization timers (7-14 days) protect vendors from inactive buyers.
The BlackOps wallet requires 10 confirmations on the Monero blockchain before funds are credited. With an average block time of 2 minutes, this process typically takes 20-25 minutes depending on network hashrate. This threshold is necessary to prevent double-spend attacks and ensure immutable transaction finality.
Buyers pay 0% fees on purchases. Vendors are subject to a sliding commission scale (2-4%) based on vendor level and total volume. Withdrawals incur a dynamic network fee, calculated based on current mempool weight, to cover mining costs for the transaction.
Transaction Mechanics
Orders utilize a cart-based system allowing multi-vendor checkouts. During checkout, users provide shipping information which is immediately encrypted with the vendor's PGP key. This data is retained only until the order is finalized, after which it is hard-deleted from the database. Payments are authorized via a separate withdrawal PIN.
Finalize Early (FE) is a privilege granting trusted vendors access to funds immediately upon marking an order as shipped, bypassing escrow. Eligibility requires 500+ successful sales and a >98% positive feedback rating. FE status is monitored strictly; suspicious activity results in immediate revocation and bond seizure.
Disputes trigger a mediation phase involving the buyer, vendor, and a market moderator. Moderators review chat logs, shipping evidence, and vendor history. Decisions are binding. The system is designed to protect buyers from non-delivery while shielding vendors from malicious refund scams.
Infrastructure & Support
The BlackOps infrastructure utilizes a distributed load-balancing network to mitigate DDoS attacks and Tor network latency. If a specific mirror is unreachable, users should rotate to an alternative signed mirror from the 'Links' page. Mirrors are rotated periodically to maintain network hygiene.
Password and PIN resets are cryptographically impossible without the mnemonic seed phrase provided at registration. Administrators do not have access to user credentials or keys. If the seed is lost, the account is permanently inaccessible. This architecture prevents social engineering and internal coercion.
Support requests regarding specific orders must be submitted via the internal ticket system while logged into the market. For access issues or general inquiries about this gateway, use the encrypted contact forms listed on our Contact page. Never transmit sensitive operational data via clear-net email.
Requires further assistance?
Open Support Ticket