Technical Documentation & FAQ
PROTOCOL SPECIFICATIONS • ESCROW LOGIC • OPSEC GUIDELINES
Architecture & Access
This gateway functions as the designated static entry point for Torzon Market. It hosts cryptographically signed references to current active V3 onion mirrors. The site ensures users have access to verified network paths to the marketplace, bypassing the need for unreliable third-party directories. We provide uptime status, PGP keys, and essential documentation for secure market interaction.
Torzon utilizes V3 Onion Services (56-character addresses) which employ ed25519 elliptic curve cryptography. This protocol offers superior security against enumeration attacks and provides end-to-end encryption between the client and the market server. The architecture ensures that the server IP is never revealed, and traffic is routed through three randomized nodes within the Tor network before reaching the destination.
Access requires the Tor Browser (version 13.0 or higher). Users must configure their security settings to 'Safest' (disabling JavaScript globally) to mitigate browser fingerprinting and XSS vulnerabilities. It is mandatory to synchronize your system clock to UTC to ensure proper circuit timing and PGP timestamp verification. Do not use a VPN with Tor unless you have configured a specific bridge setup, as this can introduce traffic correlation risks.
Accounts are strictly pseudonymous; no email addresses or personal identifiers are collected. Upon registration, a unique mnemonic recovery seed is generated—this is the only method to recover lost credentials. We enforce a 6-digit PIN for all financial withdrawals. Users are strongly advised to upload a PGP public key immediately to enable 2FA (Two-Factor Authentication), ensuring that login is impossible without the corresponding private key.
Cryptography & Security
Authenticity is verified via PGP digital signatures. Every active mirror URL is signed by the market's master key. Users should import the public key into their GnuPG keychain and verify the signed message containing the URLs. This cryptographic proof ensures that the link has not been tampered with and originates directly from the server administration.
Stealth Mode is a UI configuration that removes all graphical elements, product images, and distinct styling, rendering the market as plain text. This feature serves two purposes: it significantly reduces bandwidth usage for faster loading on slow Tor circuits, and it prevents shoulder-surfing or visual identification of the site in public environments. It can be toggled in the account settings.
While the connection to the hidden service is encrypted via Tor, we mandate that all sensitive communications (shipping addresses, tracking numbers) be encrypted via PGP before being pasted into the chat or order forms. The market has an "Auto-Encrypt" feature for convenience, but manual client-side encryption is the gold standard for OpSec to ensure even the server cannot read your messages in plaintext.
Financial Operations
The platform supports a dual-stack wallet system for Bitcoin (BTC) and Monero (XMR). Bitcoin deposits require 1 blockchain confirmation (approx. 10 mins). Monero is the recommended currency due to its ring signatures and stealth addresses, providing transaction unlinkability; XMR deposits require 10 confirmations (approx. 20 mins). We utilize unique sub-addresses for every transaction to prevent address reuse analysis.
Torzon employs a secure server-side escrow system. Funds are held in a multisig-equivalent cold storage environment upon order placement. Release to the vendor occurs only after the buyer marks the order as 'Finalized'. The system includes an auto-finalization timer (typically 14 days for physical goods). If a dispute is raised before the timer expires, funds are frozen until a moderator reviews the case details, chat logs, and shipping evidence.
Buyer accounts incur no maintenance or deposit fees. Vendors are subject to a 4% commission on finalized orders. Withdrawal fees are dynamic, calculated based on the current mempool congestion for Bitcoin or the network difficulty for Monero, ensuring priority processing. A non-refundable vendor bond of $300 USD is required to activate selling privileges, payable in BTC or XMR.
Dispute Resolution & Vendors
Disputes must be initiated before the auto-finalize timer expires. This action halts the release of funds. The 'Auto Dispute Manager' first attempts to facilitate a resolution between buyer and vendor. If this fails, an administrator joins the chat. Evidence such as tracking logs and PGP-signed communication is reviewed. Decisions are final, resulting in either a refund to the buyer or fund release to the vendor.
Vendor status requires the payment of a $300 bond and strict adherence to retail standards. Vendors must utilize PGP for all communications and provide high-resolution, original images with timestamp/username verification. Established vendors from other markets may apply for bond waivers or FE (Finalize Early) privileges by submitting proof of reputation via PGP-signed profile verification from recognized recon services.
Torzon strictly prohibits the listing of items that cause direct harm or violate core ethical standards. This includes, but is not limited to: Child Exploitation Material (CSAM), human trafficking, murder-for-hire services, weaponry/explosives, poisons, and Fentanyl (including analogues and laced products). Violation of these terms results in immediate account termination and permanent blacklisting.
Network Operations
The Tor network is susceptible to variable latency and DDoS attacks. If a specific mirror is unresponsive, users should consult the 'Links' page on this gateway to select an alternative mirror from the rotation. Our backend employs a load-balancing system that rotates active onions to mitigate targeted attacks. Premium members are allocated private, low-latency bridges for consistent access.
Support is managed internally via a ticket system accessible from the user dashboard. Tickets are categorized by urgency (Account Recovery, Transaction, General). Do not use external communication channels for sensitive inquiries. All support responses are signed by the staff PGP key. Response times average 24 hours, depending on current ticket volume and network status.