Skip to content

Image: securityaffairs.com · rights & removal

Executive Summary

A dark web marketplace named Empire Market, co-owned and operated by Raheim Hamilton and Thomas Pavey between 2018 and 2020, was involved in the anonymous buying and selling of illegal goods and services. The platform facilitated transactions involving controlled drugs, stolen or compromised credentials, personal information, counterfeit currency, and computer-hacking tools. The marketplace processed over four million transactions valued at more than $430 million, accepting payments via cryptocurrencies such as Bitcoin, Monero, and Litecoin.
In June 2024, Hamilton ("Zero Angel") and Pavey ("Dopenugget") were charged in federal court in Chicago for operating Empire Market. The platform also featured vendor rating systems based on the concealment of illegal substances in shipments. The marketplace was shut down in 2020, leading to disputes among users regarding fund withdrawals, which some attributed to a DDoS attack or an exit scam.
Raheim Hamilton was sentenced to 40 years in federal prison and fined $5 million by the U.S. Department of Justice on October 7, 2026. Hamilton pleaded guilty to U.S. drug conspiracy charges in Chicago and agreed to forfeit assets including Bitcoin, Ether, and property. Thomas Pavey also pleaded guilty and agreed to forfeit cryptocurrency and assets. Law enforcement seized $75 million in cryptocurrency, cash, and precious metals during the investigation.

Facts Only

* Raheim Hamilton co-owned and operated Empire Market from 2018 to 2020.
* Hamilton was sentenced to 40 years in federal prison and fined $5 million on October 7, 2026.
* Hamilton pleaded guilty to U.S. drug conspiracy charges in Chicago in January.
* Hamilton agreed to forfeit approximately 1,230 bitcoin and 24.4 Ether, along with three properties in Virginia.
* Thomas Pavey (aka “Dopenugget”) and Raheim Hamilton (aka “Sydney” and “Zero Angel”) were charged in federal court in Chicago for operating Empire Market from 2018 to 2020.
* The marketplace handled over four million transactions worth more than $430 million.
* The platform offered illicit goods including illegal drugs, counterfeit items, Software & Malware, and credit card numbers.
* Payments on the platform were made using Bitcoin (BTC), Monero (XMR), and Litecoin (LTC).
* The marketplace was shut down in 2020.
* Law enforcement seized $75 million worth of cryptocurrency, cash, and precious metals during the investigation.
* Vendors received ratings based on how well they concealed drugs in shipments.

Full Take

The narrative illustrates the systemic entanglement between decentralized digital economies, criminal enterprise, and state intervention. The mechanism of using cryptocurrency, encryption, and dark web infrastructure provides a facade of anonymity that directly fuels illicit trade by bypassing traditional regulatory oversight. The focus on details like vendor ratings demonstrates an insidious adaptation where criminal operations embed quasi-business protocols to manage risk among participants, suggesting a functional complexity beyond simple trafficking—it functions as an unregulated, albeit highly organized, financial intermediary for illegal goods.
The legal outcome highlights the tension between digital secrecy and physical accountability. Despite the use of advanced concealment methods, the seizure of cryptocurrency and assets demonstrates that the architecture of these criminal operations is ultimately vulnerable to forensic tracing when state agencies deploy comprehensive investigative resources. The fact that operators were able to structure transactions and even create internal reputation systems suggests a sophisticated operational mindset aimed at exploiting technical gaps rather than merely engaging in simple illicit exchange.
This case prompts consideration of how digital anonymity functions not as a shield, but as an accelerant for complex criminality. If the infrastructure can be adapted to facilitate massive financial flows, the challenge for regulation shifts from monitoring transactions alone to understanding and disrupting the self-governing structures created within these spaces. What degree of responsibility does the technology itself bear in creating environments where such detailed criminal economies can flourish unnoticed? How do systems designed for security react when their boundaries are deliberately dissolved by criminal actors building parallel realities?

From the original · Security Affairs (Pierluigi Paganini)

The case against Empire Market shows how a dark web marketplace can become a major criminal business, bringing together drug trafficking, stolen credentials, personal data and hacking tools.
Read the full story at securityaffairs.com

Sentinel — Human

Confidence

This text appears to be a factual summary derived from legal reporting, relying heavily on documented events and official statements regarding a criminal case.

Signals Detected
low severity: Varied sentence length and specific, technical details suggest human narrative flow.
low severity: The text flows logically from the case introduction to specifics of the operation, transactions, and sentencing.
low severity: Specific names, dates, monetary amounts, and procedural details suggest sourcing from a primary legal document or direct reporting.
low severity: The dense inclusion of specific legal outcomes (sentencing, forfeiture amounts) points toward factual grounding, even if the narrative framing is selective.
Human Indicators
The text integrates precise details from a press release and indictment, demonstrating engagement with primary source material rather than pure generative synthesis.
The inclusion of specific contextual details (e.g., the fate of the escrow accounts) adds narrative weight beyond simple data recitation.
US Sentences Empire Market Co-Creator Over $430 Million Criminal Marketplace | Huntaegis