Knowledge Base & FAQ

A comprehensive technical database covering TorZon Market architecture, cryptographic verification protocols, and network troubleshooting. This resource is intended for researchers and analysts studying decentralized darknet infrastructure.

PROTOCOL: TOR V3 ENCRYPTION: PGP 4096-BIT CURRENCY: XMR/BTC

Access & Connectivity

What protocols are required to access TorZon Market mirrors?

Access to TorZon Market mirrors requires the use of the Tor (The Onion Router) network. Standard browsers (Chrome, Firefox, Safari) cannot resolve .onion top-level domains. Users typically utilize the Tor Browser, which routes traffic through multiple encrypted nodes to obscure the origin IP address.

Why do .onion mirrors frequently experience latency or downtime?

Tor hidden services are subject to specific network constraints. Latency is often introduced by the multi-hop encryption process (Guard, Middle, and Exit nodes). Furthermore, marketplaces are frequent targets of DDoS (Distributed Denial of Service) attacks, which can cause temporary unavailability. Admins typically rotate mirrors to mitigate this.

How are mirrors verified?

Mirrors are verified using PGP (Pretty Good Privacy) cryptographic signatures. The market administrator signs a text file containing the current valid URLs with their private key. Users verify this signature against the administrator's public key to ensure the link has not been tampered with or generated by a malicious third party.

Security Architecture

How does the PGP verification system function?

Public/Private key pairs allow users to verify messages signed by the market administrator. A user imports the market's Public Key into their PGP client (e.g., Kleopatra, GPG). When the market posts a signed message, the client confirms the signature is mathematically valid, proving origin authenticity.

What is the purpose of the mnemonic phrase?

The mnemonic phrase (seed) is generated upon account creation and is the only method for account recovery. Because the platform does not store personal data or emails, there is no "Forgot Password" link. The phrase acts as a cryptographic seed to restore access. If lost, the account cannot be recovered.

Does the platform utilize Two-Factor Authentication (2FA)?

Yes. PGP-based 2FA is a standard security feature. During login, the server presents a message encrypted with the user's public PGP key. The user must decrypt this message locally to reveal a one-time code. This ensures that even if a password is stolen, the account remains secure without the private PGP key.

Marketplace Functionality

How does the Escrow system operate?

The Escrow system acts as a neutral holding area. When a purchase is made, funds are moved from the buyer's wallet to a multisig or temporary market wallet. Funds are held here until the buyer confirms the order is finalized. If a dispute arises, market moderators review the evidence and direct the funds accordingly.

What cryptocurrencies are supported?

TorZon typically supports Monero (XMR) and Bitcoin (BTC). Monero is the preferred standard for darknet operations due to its opaque ledger (RingCT), which obfuscates sender, receiver, and transaction amounts. Bitcoin is supported but often requires external mixing services for privacy.

What is the "Auto-Finalize" timer?

The Auto-Finalize timer is a failsafe mechanism designed to protect vendors from unresponsive buyers. If an order remains in "Shipped" status for a set period (usually 7-14 days) without a dispute being raised or the timer being extended, the funds are automatically released from escrow to the vendor.

What is "Finalize Early" (FE)?

Finalize Early (FE) is a permission granted to highly trusted vendors. It allows funds to bypass the escrow holding period and be released immediately upon the order being marked as shipped. This shifts risk to the buyer, as there is no escrow protection if the goods do not arrive.

Troubleshooting

Why might a captcha fail repeatedly?

Repeated captcha failures often result from Tor exit node IP rotation. If the IP changes mid-session, the server may invalidate the session token. Additionally, unsynchronized system clocks or strict JavaScript blocking settings (NoScript set to "Safest") can interfere with captcha validation scripts.

What happens if a deposit is sent to an old address?

Deposit addresses are typically rotated for privacy and security. Sending funds to an old, expired address usually results in a permanent loss of funds, as the private keys for that address may no longer be monitored by the market's wallet daemon.