Social Lounge Started Oct 5, 2026 2:12 PM

Dread's onion private key was exposed. Make sure to update you Dread link if you have it bookmarked!

11 replies - 740 views - 2 thanks - 0 tippers - 3 watchers

Oct 5, 2026 2:12 PM Last edited Oct 5, 2026 2:18 PM
#1

No user data was compromised. I tried uploading screenshots of the admin posts on this but there seems to be some sort of forum glitch and they aren't uploading correctly, so i will copy paste the messages:

Hugbunter:

Today is a sad day, many users have just been subjected to a message on the Dread onion link stating that it was "hacked" and that they are in control of all data.

I've spent the last hour reviewing everything and can confidently say that our infrastructure has been unharmed and there has been no breach of any servers. Unfortunately, it appears that a recent upload of an updated archive for the GoBalance software, was the wrong package containing, what should have only ever remained local, our onion private key.

This is a SERIOUS problem and the first real security issue we have experienced since launch. It was a major oversight which is going to have a lasting effect. For the time being I am publishing our key in an attempt to over-ride the child who has promptly launched a vibe coded forum to try and control the community, with his "hacked" post containing shill comments to try and push agreement with his actions (posted 6 days ago, all AI written comments).

After today, you will be able to consider the:
dreadytofatroptsdj6io7l3xptbet6onoyno2yv7jicoxknyazubrad.onion

domain as retired. For a short period, we will relay the message through it once we have established a new address to move to. Before a permanent DoS attack will prevent its use from here onward.

Important:

      • No servers have been breached
      • No user data accessed
      • Servers remain unexposed
      • Do not trust the dreadytofatroptsdj6io7l3xptbet6onoyno2yv7jicoxknyazubrad.onion domain, new domain will be published through Daunt.link and Tor.watch imminently. This domain can be used by whoever has the private key, which opens huge MiTM risks.

I will provide updates once the new onion is live.

Paris:

I fucked up.

Archived the wrong directory in the incorrect Qube and stupidly uploaded dread's main onion private key into a gobalance update. I'm going to blame this on the drugs and just my carelessness. This is cold water down my back and a serious wake up call on my excessive drug use. I seriously can't believe this happened and I'm going to be forever embarrassed about it for the rest of my life.

I can not apologize enough. We are not going anywhere and that retired onion won't be online much longer. The kind of bug bounty that could have been gotten for that fuck up... but I can't blame someone for trying to capitalize on it.

This is on me. I'm stopping all the drugs. And I'm going to have the keys on a completely different qubeos device now. So even in my rush I won't be able to fuck that up. If anyone views me as not human this is a perfect case to show I am.

Man I really did like that fucking onion too. But it got too fat for it's own good. We will need to slaughter it now.

2 thanks - 0 tippers - 3 watchers

Replies

Page 1 of 2 - 11 total
Oct 5, 2026 3:19 PM
#2

@xenu Whats your opinion on tenebris? Is it trust worthy?

Signature

You are the only light

blog: freedomthemoon.netlify.app
map: premiumpostcode.com
github: moonboi420

0 thanks - 0 tippers
Oct 5, 2026 6:54 PM
#4

Also forgot to point this out but it is hilarious how Hugbunter basically said that he is going to ddos the shit out of the fake onion site now hahaha

0 thanks - 0 tippers
Oct 5, 2026 7:10 PM
#5

@xenu oh its a new forum. Basically another dread but I'm not sure how trustworthy it is for links, reviews, etc...

Signature

You are the only light

blog: freedomthemoon.netlify.app
map: premiumpostcode.com
github: moonboi420

0 thanks - 0 tippers
Oct 7, 2026 4:35 AM
#8

Great. That has been the blueprint darknet news aggregator for years, especially after dark[.]fail slowed down into practical silence. Hopefully they'll manage to stay around and come up with a new vanity v3 address soon enough. Thanks for covering these news.

0 thanks - 0 tippers
Oct 7, 2026 2:56 PM
#9

It looks like the most recent link is occasionally working now but mitm attacks are possible and it is not secure.

0 thanks - 0 tippers
Oct 7, 2026 3:53 PM
#10

https://goyimx.com/xenumonero/status/2107861617861947416

update on Dread: Paris posted a signed pgp message on Pitch (which I verified in the screenshot) with an update about Dread after the second exploit. Apparently a vulnerability with Gobalance had gone unnoticed for 4 years. See screenshot for full explanation with technical details.
For the post on Pitch, see: /p/4eee3609

1 thanks - Nebuchadnezzar_II - 0 tippers

Post A Reply

You must be logged in to reply. Login or register.