Heir to Hydra: how the darknet marketplace Kraken laundered $186 million through crypto exchanges
April 2022 became a turning point for the Russian-speaking darknet: German law enforcement seized Hydra's servers, leaving thousands of vendors and buyers without their usual platform. But the vacuum did not last long — within a few months, a new player emerged, Kraken Market, which not only filled the vacated niche but built one of the most extensive shadow financial ecosystems.
The Rise of Kraken: From Hydra's Ruins to Market Leader
My analysis shows that Kraken is not a classic vertical structure but a decentralized coordinator platform functioning as a shadow counterpart to AliExpress. The administration provides the interface, internal BTC balance, and arbitration, while hundreds of independent shops handle logistics and sales themselves. This architecture makes the platform nearly invulnerable to targeted strikes — eliminating one link does not destroy the system.
By 2025, Kraken confidently took first place among Russian-speaking darknet markets, and in 2024, approximately $737 million passed through its infrastructure. For comparison, this is comparable to the GDP of small states. Notably, the project positioned itself as Hydra's successor from the very start, using the WayAway forum to poach vendors, and in the fall of 2022 even launched a bold advertising campaign in central Moscow.
The Financial Machine: Three Money Laundering Routes
My on-chain investigation uncovered a complex system of three parallel schemes through which at least $186.5 million passed. This is a conservative estimate — real flows are likely significantly higher, given undisclosed clusters and the use of privacy coins.
- Bridges → BNB Smart Chain ($72.55 million): Small BTC payments are automatically consolidated into batches of ~10 BTC, held for several days to obscure the trail, then split and converted into BTCB via the Bridgers service, after which they are exchanged for USDT/USDC and distributed to the exchanges HTX, MEXC, KuCoin, and Gate.io.
- Avalanche → HTX ($74.19 million): The largest route. Funds are converted into BTC.b via the Avalanche Bitcoin Bridge, exchanged for USDT through LFJ, and settled on HTX wallets. It is here that a critical link to Hydra was found: part of the funds from a wallet that had accumulated the old platform's money followed the exact same laundering path years later.
- Built-in exchangers → TRON ($39.75 million): Kraken's internal services accept BTC from vendors and instantly issue USDT on the TRON network, after which the funds dissolve into a dense web of intermediary wallets, partially settling on WhiteBIT.
The Hydra Trace: Coincidence or Pattern?
The key finding is the match of the complete laundering route, not individual addresses. Hydra's funds, frozen since 2022, began moving in January 2026 along the same chain: splitting, the same Avalanche bridge, the same conversion, and withdrawal to HTX. Such a complete pipeline match rules out coincidence.
My conclusion: with a high degree of probability, one team or the same withdrawal operator was responsible for the financial servicing of both platforms. The blockchain does not prove common ownership, but it convincingly demonstrates the existence of a unified financial circuit that survived Hydra's closure. This is an alarming signal for regulators: the laundering infrastructure proved more resilient than the marketplaces themselves.