Nexus Market: Official Onion Links, Mirrors and Access Guide
Nexus Market is a Tor based marketplace that pairs a clean, fast storefront with an escrow first design. You reach it through the Tor Browser using a .onion address rather than an ordinary domain. The verified addresses above are the current set. Copy one, open it in the Tor Browser, and you are on the genuine storefront. The guide below covers access, payments, escrow, and the habits that keep a buyer safe.
Security Architecture and Tor Access
Every connection to Nexus is routed through several Tor relays before it reaches the storefront, which keeps both your location and the server location obscured. To open the marketplace you need the Tor Browser set to the Safest security level, where scripting and other risky features are disabled. The platform is built to work cleanly at that setting. On top of the network protection sits account security: a unique passphrase, two factor login, and signed sessions. The single most important rule is to reach the storefront only through a verified address, which is exactly what this directory provides.
Payments: Bitcoin, Monero and Litecoin
Nexus accepts three cryptocurrencies, all treated as first class options. Bitcoin is the most widely available and the easiest to acquire, though its ledger is public and therefore traceable. Litecoin works much like Bitcoin but confirms faster and cheaper, which suits a quick, low cost deposit. Monero is the privacy focused choice: ring signatures and stealth addresses conceal amounts and parties, leaving a far smaller trail, so it remains the most private of the three. Whichever coin you choose, the deposit funds the same multisig escrow at checkout. You are never forced into a single currency.
Multisig Escrow Explained
Every order settles through a two of three multisig contract. Three keys exist, held by the buyer, the vendor, and the platform, and any two can release the funds. In a normal transaction the buyer and vendor sign once goods are delivered, and the platform never touches the money. If something goes wrong, the platform key becomes the tiebreaker through the arbitration panel. There is no single platform held wallet that can quietly disappear, which closes the exit scam vector that has sunk weaker markets.
Browsing and Placing an Order
Once your balance is funded, browsing is straightforward. Filter by category, read the listing carefully, and check the vendor page before you commit. When you place an order it enters the multisig escrow automatically, so your funds are protected from the moment of checkout. After delivery you confirm and release, or open a dispute if there is a problem. The flow is deliberately simple, which reduces the small mistakes that cause friction on busier platforms.
How Nexus Compares
Against other Tor marketplaces, Nexus stands out for accepting Bitcoin, Monero and Litecoin rather than forcing a single coin, and for a multisig model that is genuinely two of three rather than a thin wrapper around a platform wallet. Its rotating address set keeps it reachable when single address markets stall under pressure. It is not the loudest marketplace, but for buyers who weigh reliability and escrow integrity above hype, it is one of the steadier choices.
Safety Best Practices
Use the Tor Browser at the Safest setting, every time. Pick a long, unique passphrase and turn on two factor login the moment you register. Keep balances modest and withdraw what you are not actively using. Most importantly, only ever reach the storefront through a verified address: copy the onion, do not retype it. A single wrong character in a fifty-six character address sends you somewhere that is not Nexus, and copying removes that risk entirely.
The Mirror System
Nexus publishes a small set of onion addresses that all point at the same back end. When one address is under heavy load, the others stay responsive, so there is almost always a working way in. Every mirror leads to the same account, balance, and order history. Bookmark this directory rather than any single onion, because the published set rotates with the operator and a bookmarked onion will eventually fall out of the live set.
The Story of Nexus Market
Nexus emerged during a thin stretch on the Tor market scene. Several large names had stumbled in close succession, leaving buyers cautious and vendors looking for somewhere stable to land. The first public mention of Nexus circulated on Dread before the storefront itself was reachable; that pre-announcement laid out the multisig design, the rotating address policy, and a hard line against any single platform wallet. When the doors actually opened, the design lived up to the writeup, which earned the project an unusually patient reception for a new marketplace.
The operator, who signs under the handle nx-op on Dread, has stayed deliberately quiet between updates. Posts appear when there is a structural change to announce — a key rotation, a new mirror, an escrow upgrade — and almost never otherwise. That posture has held since launch and is part of why the platform reads as a service rather than a personality. Nothing about the marketing was loud, nothing about the launch felt rushed, and the first quarter of operation passed without an emergency announcement of any kind.
The early vendor base came largely from refugees of two recently-closed marketplaces who had been vouched for on Dread and could move stock without a long onboarding tail. That continuity carried product trust forward from the prior platforms in a way new markets rarely manage, and it shaped the tone of the storefront — less of a launch, more of a relocation. The buyer experience benefitted from the same continuity; orders flowed within hours of opening rather than the slow trickle that usually marks the first weeks of a new venue.
Vendor Roster and Listing Categories
The vendor base on Nexus runs in the low hundreds and the operator caps the count rather than chasing volume. New vendor accounts pass through a deposit and a public PGP key check before any listings go live, which keeps the lookalike problem tractable. Returning vendors carry a coloured trust badge that reflects unsigned feedback windows, signed dispute outcomes, and time on the platform. The badge is generated server-side and refreshed nightly, so it always reflects the last quarter of activity rather than a single dramatic order.
Categories on the storefront cover the usual breadth — substances, digital goods, services, and a smaller miscellaneous tab — and each one is gated by region filters so a buyer in one country is not staring at listings that will never ship to them. The category pages refresh in near-real time, so a vendor going offline drops from the visible roster within minutes rather than at the next daily cron, which is part of why the storefront feels lighter to browse than other markets of comparable size. Search runs against the same live index and ignores listings with active disputes by default, so what you see is what you can actually buy.
Each listing page carries a short, signed seller intro at the top, the standard description block, and a feedback strip at the bottom that orders comments by most-recent rather than highest-rating. That ordering choice is deliberate: it surfaces problems faster than a star average can. Buyers who want to read older feedback can swap the order at the top of the strip; the default favours the news that matters now.
PGP Practices on Nexus
Every vendor publishes a PGP key on their public profile and every buyer is encouraged to encrypt shipping detail in the order message field with that key. The storefront has no automatic PGP layer because that would put a server-side process in the path of plaintext; the encryption stays with the buyer, on the buyer's machine, which is the way the threat model on the platform was written. The vendor page makes the public key available as a downloadable block and as an inline copy field so either method of importing the key works without leaving the Tor Browser.
The operator's own PGP key is pinned in the footer of the storefront and signed advisories accompany any state change announced on Dread. Verifying that key once and pinning the fingerprint locally lets you read those advisories with confidence later. The fingerprint has not rotated since launch, which is unusual on the scene and reflects an operational deliberateness that holds across the rest of the project. Buyers who want to be sure they are on the genuine storefront cross-check the footer key against the fingerprint they verified earlier; an attacker running a lookalike onion cannot serve the same key without also holding the operator's private half, which they do not.
Account Hygiene and Recovery
A Nexus account is anchored by a passphrase you set during registration and a mnemonic the storefront generates the first time you log in. The passphrase opens the account; the mnemonic is the only thing that recovers it if you lose the passphrase. Both belong outside the browser — paper, an encrypted file on a separate device, anywhere that is not in the same place as the Tor profile you use to sign in. The storefront never stores a copy of either in clear form, so a server compromise alone will not surrender accounts to whoever holds the database.
Two-factor login on Nexus accepts a TOTP code from any standard authenticator and a PGP-challenge response as a backup. Buyers who turn it on at registration are spared the small but real risk of password reuse from elsewhere, and the storefront treats a fresh device login as a new circuit even if the passphrase matches, so an unexpected sign-in surfaces immediately rather than after the fact. A balance you do not have on the platform is a balance an attacker cannot take, so the practice of withdrawing what you are not actively using compounds the protection of the account itself.
If an account does get locked out — passphrase forgotten, mnemonic missing, second factor lost — the storefront has no support channel that can override the cryptography. The deliberate friction is the feature; an account that can be recovered by a polite message can also be hijacked by a convincing one. Buyers who treat the recovery material with the seriousness it deserves keep the account; buyers who do not, lose it. The marketplace does not pretend the trade-off can be softened, and that honesty is itself a piece of the platform's design.
Withdrawing from the Storefront Wallet
The storefront wallet is meant for transactions, not custody. A withdrawal goes to any external address you control: a hardware wallet, a non-custodial mobile client, a separate paper address. The flow is the inverse of a deposit — pick a coin, paste a destination, confirm. Bitcoin and Litecoin withdrawals queue and broadcast on the next batch cycle, which runs frequently enough that funds usually clear within an hour; Monero withdrawals broadcast individually and reach the destination as soon as the network confirms the transaction. The fee model is published on the withdrawal page in plain numbers, not as a percentage hidden somewhere down the legal text.
The practical rule is the same as for any custodial-feeling balance on the open internet: keep on the storefront only what you are about to spend. The marketplace treats its wallet as a checkout buffer rather than a vault and the operator has been explicit about that framing since launch. Buyers who hold significant balances on the storefront for convenience are exposed to a class of risk the design was never meant to cover, regardless of how well the rest of the platform is run.
Disputes and Arbitration
An order that does not arrive, arrives short, or arrives unusable is handled inside the storefront's dispute system rather than through any external channel. Either side opens a dispute from the order page, the platform freezes the escrow at its current state, and a three-person arbitration panel reviews the message log, the timestamps, and the vendor's shipping pattern before signing the platform key in one direction or the other. The panel is anonymous to buyer and vendor by design — a name on the decision would invite pressure neither side benefits from — and its rulings are appended to the order page as part of the permanent record.
Most disputes never reach the panel. The arbitration page surfaces a recommended split as soon as a dispute is opened, calculated from the order value, the time since shipment, and the vendor's recent dispute history. Both parties can accept the recommendation in a single click; when they do, the escrow releases on the spot without the panel touching the order. The recommendation is calibrated quarterly against actual panel outcomes, so it tracks closely with what a human reviewer would have decided. That feedback loop is one of the quieter pieces of the platform and one of the reasons buyer satisfaction has stayed high relative to peers.
If a dispute does need the panel, expect a resolution window of three to seven days. The panel reads the order log carefully and asks for evidence in writing rather than acting on assertion; buyers and vendors who keep clear records of their messages and any external correspondence — encrypted, but available to be unsealed for the panel under their own keys — tend to see decisions land in their favour more often than those who do not.
Spotting a Lookalike Storefront
The single most common attack on Nexus visitors is not a server compromise; it is a near-identical onion address standing up a copy of the storefront to harvest passphrases or seed deposits sent to attacker-controlled addresses. Lookalike onions usually differ from a genuine address by one or two characters in the middle, where the eye is least likely to catch the substitution. The defence is to copy a verified onion from this directory rather than to type or paste from memory, and to verify the operator's PGP fingerprint in the storefront footer against a copy you pinned earlier.
A few quick checks raise the bar further. The genuine storefront serves its login page with a static header that has not changed in over a year; a lookalike replicating the page from a screenshot rarely matches the spacing exactly. The genuine storefront also signs every deposit address it issues with the operator key, and a buyer who exports that signature and checks it in their local copy of GnuPG catches a swap immediately. None of these checks is hard; the cost of skipping them is the entire deposit, which makes the time investment worthwhile every single time.
If anything on the storefront looks subtly off — unfamiliar formatting, a missing footer key, an unexpected request to re-enter the mnemonic on login — close the tab, fetch a fresh onion from this directory, and try again from a clean Tor circuit. The genuine storefront is patient; an attacker's storefront is patient too, until the moment you submit the credential. Treat anything that breaks pattern as a reason to back out, not a reason to push through.
Roadmap and Operator Transparency
The operator publishes a quarterly note covering throughput, dispute volume, and any infrastructure changes that affected uptime. The notes are dry by design — no marketing copy, no promises — and they have appeared on schedule every quarter since launch. That cadence is what underwrites the project's reputation more than any single feature, because consistency over time is the harder thing to fake on the Tor scene. Each note is signed with the same PGP key that has anchored the storefront since day one, so the chain of attestation is straightforward to follow.
The current roadmap focuses on rotating the cold-storage signer keys without disrupting active escrow contracts, formalising the dispute panel into a published process, and improving the storefront's regional filter so buyers and vendors stop seeing listings that will not ship to them. None of those items are visible on the front of the storefront — they are spine work that keeps the platform stable as it grows — but they are documented in the quarterly note and on the project's Dread thread for anyone who wants to follow along. The roadmap is intentionally narrow; the marketplace is not trying to be everything at once, and that restraint is part of the appeal.
Frequently Asked Questions
What is Nexus Market?
Nexus Market is a Tor based marketplace reached through an onion address. It settles every order through a two of three multisig escrow and accepts Bitcoin, Monero and Litecoin, so funds are never held under a single platform key.
How do I access Nexus Market?
Install the Tor Browser, set its security level to Safest, then copy a verified onion address from this directory and open the full http link in the address bar. A standard browser cannot open a .onion address.
What is the official Nexus Market URL?
There is no single permanent onion. Nexus rotates a small set of addresses for resilience, so the safe approach is to copy a current one from this directory rather than typing a fifty-six character string from memory.
Is Nexus Market safe to use?
The platform provides multisig escrow, two factor login, and signed buyer feedback. Your own habits matter just as much, which means using the Tor Browser at Safest and only ever reaching the storefront through a copied, verified address.
What payment methods does Nexus Market accept?
Nexus accepts Bitcoin, Monero and Litecoin. Bitcoin is the most widely available coin and Litecoin settles quickly with low fees, while Monero offers stronger privacy because its ledger conceals amounts and parties. All three fund the same multisig escrow at checkout.
What should I do if a Nexus Market mirror is down?
Switch to the next address in the list. Every mirror leads to the same account, balance, and order history, so a slow or flooded entry never locks you out. Trying a different mirror builds a fresh Tor circuit and usually connects.