After Hydra: How the Russian-Language Darknet Reorganized, Fought, and Moved to Telegram
When German authorities seized Hydra Market in April 2022, they dismantled a platform that had captured over 90 percent of all darknet market revenue at its peak. Pundits predicted the Russian-language underground would never recover. Four years later, it has rebuilt itself into something more fragmented, more combative, and far more public than anything Hydra ever was.
A vacuum, then a scramble
The first beneficiary of the Hydra takedown was OMG!OMG! Market, a little-known drug bazaar that launched in 2020. According to Chainalysis researchers, former Hydra counterparties migrated almost exclusively to OMG within days, pushing its share of the market above 50 percent and peaking at 65.2 percent on April 23, 2022. Analysts even noted deposit-address overlap suggesting possible administrative ties between the two platforms. The succession was never peaceful. In June 2022, a distributed denial-of-service attack crippled OMG just as it seemed untouchable, and vendors began drifting toward two rivals: Blacksprut and Mega Darknet Market. Each would dominate in turn, and none would come close to matching Hydra's financial scale.Breaches became business strategy
What followed was less a marketplace ecosystem than a low-grade war. Blacksprut was hacked in November 2022, eroding trust just as its revenue peaked and pushing users toward Mega, which led the sector in 2023 with more than half a billion dollars in crypto inflows. Then, in January 2023, the newcomer Kraken hacked rival Solaris outright, seizing its servers and repositories and redirecting its users. These were not isolated incidents. Rival markets traded DDoS campaigns, leaked databases, and black propaganda, while pro-Kremlin hacktivist groups such as Killnet appeared in the financing trails of some platforms. Trust, the core commodity of any escrow-based market, became a weapon to be spent against competitors.Billboards in broad daylight
Perhaps nothing captures the strangeness of the post-Hydra scene like its advertising. As Chainalysis documented, Kraken teased its launch with an immersive 3D billboard in central Moscow featuring an animated sea monster, then wrapped a city bus in promotional material complete with a QR code for its onion site. The bus blocked two traffic lanes near Russia's Ministry of Foreign Affairs before security forces removed it an hour later.BlackSprut went further still, projecting its slogan onto giant electronic billboards over Moscow in February 2023 while allegedly donating cryptocurrency to pro-Russian paramilitary units.Reporting by The Record's Daryna Antoniuk framed the campaign as evidence of a certain permissiveness in Russia, where cybercriminals rarely face extradition and enforcement moves slowly. Whatever the mechanism, no Western darknet market has ever dared market itself so brazenly.