Heir to Hydra: how the darknet marketplace Kraken laundered $186 million through crypto exchanges
April 2022 became a turning point for the Russian-speaking darknet: German law enforcement seized Hydra's servers, leaving thousands of vendors and buyers without their usual platform. The vacuum was filled rapidly — within just a few weeks, a new player emerged, Kraken Market, which not only took over the vacated niche but also built a financial infrastructure striking in its scale.
The Rise of Kraken: From Hydra's Ruins to Shadow Dominance
Kraken is not a vertically integrated organization but a decentralized coordinator platform operating through Tor. The administration provides the interface, internal BTC balance, and arbitration, while hundreds of independent shops handle logistics and sales themselves. This architecture makes the platform nearly invulnerable to targeted strikes — the arrest of one vendor causes no damage to a system where another instantly takes their place.
My analysis of blockchain data shows that by 2025, Kraken had become the undisputed leader of the segment. In 2024, on-chain inflows amounted to about $737 million — a sum comparable to the GDP of small states. But the most notable aspect is not trading volumes, but the sophistication of the laundering system through which at least $186.5 million passed over two years, with nearly $147.5 million settling on exchange wallets.
Three Laundering Circuits: Anatomy of a Financial Machine
My research has identified three separate but interconnected routes for fund legalization. Each is technically unique, but all solve the same task — breaking the on-chain link between incoming bitcoins and final recipients.
The first route ($72.5 million) is a classic "aging" scheme: small payments are collected into standard batches of ~10 BTC, held for several days, split into tranches of 1 BTC, and sent through the Bridgers service to BNB Smart Chain. There, BTCB is converted into USDT/USDC via PancakeSwap and distributed across dozens of addresses, ultimately ending up on HTX, MEXC, KuCoin, and Gate.io.
The second route ($74.2 million) is the largest and perhaps the most telling. Bitcoins are converted into BTC.b via the Avalanche Bitcoin Bridge, exchanged for USDT, and withdrawn to HTX. It is here that a connection to Hydra is revealed: part of the funds traced to address 3DqTZnes…vHVt, which accumulated money from the old platform, followed in 2026 exactly the same laundering path as Kraken's assets. The coincidence of the entire chain, rather than a single address, virtually rules out chance.
The third route ($39.75 million) involves built-in exchangers that convert vendors' internal BTC into USDT on TRON for a fee. This is the fastest channel — payout occurs within three minutes of sending the bitcoin.
Analyst's Conclusions
The identified volume is only a lower bound. Privacy coins, unlabeled clusters, and internal transfers remain beyond the scope of on-chain analysis. However, the main conclusion is obvious: Kraken has not just inherited Hydra's market but, judging by identical withdrawal patterns, also uses the services of the same team of financial operators. This indicates continuity not only of commercial but also of criminal infrastructure, making the fight against such platforms a task an order of magnitude more complex than simply shutting down servers.