Multisig vs central wallets: the custody fight darknet markets never finished
When Evolution vanished in March 2015, roughly $12 million in customer bitcoin went with it, and every satoshi had been sitting in a wallet the market controlled alone. The lesson was obvious. The fix was already known. Almost nobody wanted it.
A honeypot by design
Early darknet markets inherited their escrow logic from eBay: the buyer deposits funds, the site holds them, the vendor ships, and the site pays out. That model concentrates every live-order balance in one operator-controlled hot wallet. As Europol noted in its 2015 Internet Organised Crime Threat Assessment, the arrangement made escrow simultaneously a trust mechanism and a single point of catastrophic failure (Europol IOCTA 2015). The failures stacked up fast. Sheep Marketplace folded in late 2013 with an estimated 36 million euros in member coins; Evolution followed in 2015 with roughly 11 million more, per the same Europol assessment. Each exit scam pushed users toward the same uncomfortable question: why hand the market your money at all?How 2-of-3 multisig changes custody
Multisignature escrow splits control three ways. The buyer funds a Bitcoin address that requires two of three keys to spend: buyer, vendor and market each hold one. In a smooth deal, buyer and vendor co-sign the release and the market never touches anything. In a dispute, the market's key acts only as a tiebreaker, signing alongside whichever party wins arbitration. No single party can move the funds alone. If the platform vanishes mid-order, buyer and vendor can still settle between themselves with their two keys. OpenBazaar, the peer-to-peer marketplace that launched publicly in April 2016, built exactly this structure into its core protocol, with buyers and sellers choosing independent moderators who held the third key (OpenBazaar project documentation). Its published escrow specification described the same 2-of-3 moderated-payment flow used across the ecosystem (OpenBazaar escrow spec).The clean experiment nobody scaled
OpenBazaar proved the cryptography could run in production for years without a systemic exploit. It never proved demand. A Carnegie Mellon study described the platform as closer to a ghost town than an open market, with thin listings and thinner transaction volume despite functioning escrow (Arps, Carnegie Mellon University). By September 2020 the team announced a full shutdown and urged users to withdraw any remaining balances (BitcoinWorld). The escrow design survived the experiment intact. The marketplace around it did not.Why adoption stayed niche
The barriers were mostly practical rather than ideological:- Key management. Buyers had to generate, store and use private keys locally. One lost wallet file turned a routine order into arbitration.
- Friction. Multisig added setup steps, signing delays and occasional failed transactions to every purchase, in an environment where speed mattered.
- The Monero shift. As markets migrated to XMR for privacy, Bitcoin-based multisig lost its technical home; Monero multisig exists but is far harder to implement cleanly.
- Operator incentives. Central wallets gave administrators float, fee leverage and control, so plenty of markets quietly preferred them.
Where custody stands now
A decade on, the split persists. Reference guides aimed at market users still describe centralized escrow as the default and warn plainly about its failure mode: traditional escrow works well when the market is honest, and fails catastrophically when it is not (TorWiki escrow guide).Every major exit scam in darknet history exploited the custodial single point of failure. Traditional escrow works when the market is honest; it fails catastrophically when it is not.Researchers tracking the ecosystem note that multisig reduces rather than eliminates exit-scam risk, because vendors can still push early finalization and disputes still depend on human arbiters. For readers auditing where a deposit address actually points, our bitcoin validator breaks down the script type behind any address. Most active markets today still default to operator-held wallets, with genuine 2-of-3 settlement available on only a minority of platforms. The cryptography won the argument years ago. Adoption is still waiting for incentives to catch up, a tension we examined previously in escrow economics.