✅ b1exch.to - Instant Auto Exchange | NO KYC | Escrow 0.2 BTC

[TryNinja]

FYI, looks like the clearnet domains are down (ERR_NAME_NOT_RESOLVED),

Tor mirror is working just fine.

[Lakai01]

Unfortunately, I can't confirm that. I can't access the address via Tor either. Are there any mirror sites that might still be working? Unfortunately, I didn't make a note of any...

It doesn't matter whether I have Proton VPN activated or not, I still can't access the site. I tried that too.

I hope that the problem will be fixed quickly and that b1exch will be back online soon. Of course, I would be interested to know the reason for the unavailability afterwards!

[TryNinja]

Unfortunately, I can't confirm that. I can't access the address via Tor either. Are there any mirror sites that might still be working? Unfortunately, I didn't make a note of any...

It doesn't matter whether I have Proton VPN activated or not, I still can't access the site. I tried that too.

I hope that the problem will be fixed quickly and that b1exch will be back online soon. Of course, I would be interested to know the reason for the unavailability afterwards!

All official links are on their bitlist page: https://bitlist.co/service/b1ack-exchange

Tor is definitely working fine, I just checked again. Maybe change your circuit.

http://blckexcrpdmau6y7teqxmf6yiyg7xn7qlphjeaxgyimxokz623w4tmqd.onion

[Ultegra134]

Unfortunately, I can't confirm that. I can't access the address via Tor either. Are there any mirror sites that might still be working? Unfortunately, I didn't make a note of any...

It doesn't matter whether I have Proton VPN activated or not, I still can't access the site. I tried that too.

I hope that the problem will be fixed quickly and that b1exch will be back online soon. Of course, I would be interested to know the reason for the unavailability afterwards!

Clearnet mirror links are also down and not responding for me either, but as @TryNinja just mentioned (while I was typing this) the Tor mirror links work fine and had no issues accessing the exchange myself. I'm currently online and about to test how it works etc.

[dansus021]

Is still down ?

Bitlist said the same things, too

[Lakai01]

Tor is definitely working fine, I just checked again. Maybe change your circuit.

http://blckexcrpdmau6y7teqxmf6yiyg7xn7qlphjeaxgyimxokz623w4tmqd.onion

Yes, I can confirm that changing the circuit solved the problem and I can access it again, thanks for the tip.

In the ANN thread on Altcointalks, someone mentioned that the Clearnet address is being attacked repeatedly. I therefore looked at the history on Bitlist, where you can also see that the address is repeatedly unavailable:


Perhaps @OP could provide more detailed explanations of what is happening here? 

[joker_josue]

It's still down right now. It's probably actually suffering some kind of attack, even with Cloudflare's help.

Is the onion version still working normally?

We just hope things can be resolved quickly.

[b1ack]

Infrastructure Under Attack - And We're Still Here

We're facing tremendous attacks on our infrastructure. Let's go through every hit we've taken:

Round 1: Clearnet DDoS

Normal volumetric DDoS attacks on clearnet.
- Attack type: Layer 3/4 packet floods
- Our response: Forced to use Cloudflare
- Result: Clearnet stabilized
- Attacker success: Zero

Annoying? Yes. Effective? No.

---

Round 2: Platform Penetration Attempts

Direct attacks on the b1eXch exchange platform.
- Attack type: Penetration testing, exploit attempts
- Targets: API endpoints, swap processing
- Our response: Monitored, logged, patched
- Result: They failed.

Every attempt blocked. Free security audit for us.
- Attacker success: Zero

Nice try though.

---

Round 3: Tor Onion DDoS - The Big One

This is where it gets interesting.

We got hit with a very powerful DDoS attack on our Tor onion address.

So powerful that it resulted in Tor network instability.

Let that sink in.

To take down our Tor onion, they had to attack so hard that the entire Tor network became unstable.

This is exactly what we prepared for.

You can't just DDoS a Tor onion address like a clearnet site. To take down our Tor service, you need to take down the Tor network itself.

And that's exactly what they tried to do.

Result:
- Tor network experienced instability (not just us - the entire network)
- Our onion stayed up through it
- Attack eventually subsided
- Tor network recovered
- We're still here
- Attacker success: Zero (but points for effort)

The scale of this attack tells you everything you need to know.

They weren't just trying to DDoS us. They were attacking the Tor network infrastructure itself to get to us.

That's the level of resources being thrown at this.

---

Round 4: Njalla Domain Suspension - The Irony

And now, the cherry on top:

Njalla - the "most notorious privacy domain registrar" - has suspended our clearnet domains.

You know Njalla, right?
- "Privacy-focused domain registration"
- "Protects customers from censorship"
- "Founded by The Pirate Bay's co-founder"
- "Stands up to abuse complaints"
- "Your info stays private"

That Njalla.

They suspended us.

A "privacy" registrar suspending a no-KYC exchange.

The company founded on anti-censorship principles censored us.

We really question their "privacy views" now.

---

The Pattern We're Seeing

Companies use the word "privacy" to sell products, but they never actually provide privacy services when it matters.

Privacy as marketing:
- Sounds good in advertisements
- Attracts privacy-conscious customers
- Easy to claim when there's no pressure

Privacy as principle:
- Standing up when it's uncomfortable
- Protecting customers under pressure
- Following values over profit
- Not folding at first complaint

Guess which one Njalla chose?

---

What These Attacks Tell Us

These attacks are only making us stronger.

Think about the resources required here:

- DDoS clearnet: Easy, cheap, anyone can do it
- Penetration testing: Moderate effort, requires some skill
- DDoS Tor network itself: Expensive, requires serious infrastructure, state-level resources
- Domain complaints: Time and coordination

Someone is spending serious money trying to take us down.

Why? Because we're a threat.

Not to users. Not to legitimate businesses. But to:
- Surveillance-based exchanges that profit from KYC data
- Blockchain analytics companies that sell "taint" scoring
- Governments that want to track every transaction
- Competitors who can't compete on service so they attack infrastructure

If we weren't effective, they wouldn't bother attacking us.

The attacks prove we're doing something right.

---

The Tor Attack Specifically - Let's Talk About This

Attacking a Tor onion service isn't like DDoSing a clearnet site.

How Tor works:
- Requests route through multiple nodes
- Distributed by design
- No single point of failure
- Resistant to conventional DDoS

To effectively DDoS a Tor onion:
- Flood the introduction points
- Overwhelm the hidden service directory
- Or attack Tor network infrastructure itself

They chose option three.

The attack was so massive it caused Tor network-wide instability.

This wasn't a script kiddie with a botnet.

This was a coordinated attack with serious resources, targeting Tor network infrastructure to get to one onion service.

Our onion service.

Think about what that means:

Someone spent the money and resources to attack the entire Tor network just to try to take us down.

And we're still here.

Attack impact on b1eXch:
- Some latency during peak attack
- small downtime
- All swaps processed normally
- No data compromised
- No funds affected

Attack impact on Tor network:
- Temporary instability reported by Tor Project
- Affected multiple services (not just us)
- Network eventually stabilized
- Tor is still Tor

Attacker's return on investment: Nothing

All that money, all those resources, all that effort.

And we're still processing swaps.

Was it worth it?

---

To The Attackers

We see you. We know what you're doing. We're prepared for it.

Here's what you've accomplished so far:

- Forced us to use Cloudflare (minimal inconvenience)
- Stress-tested our platform security (it held)
- Attacked Tor network itself (we survived)
- Got our domains suspended (we're moving registrars)

Here's what you haven't accomplished:

- Stopped our service
- Compromised user data
- Stolen funds
- Broken our security
- Made us implement KYC
- Made us shut down
- Discouraged us in any way

Current score: Attackers zero, b1eXch four

Keep trying though. You're just:
- Teaching us what to harden
- Showing us attack vectors to patch
- Proving we need better infrastructure
- Demonstrating why decentralization matters
- Giving us free penetration testing

Thanks for the help. Seriously.

Every attack makes our next version better.

---

To Njalla: An Open Letter

We get it. Someone complained. Maybe law enforcement. Maybe a competitor. Maybe a concerned citizen who thinks privacy equals crime.

And you suspended us without warning or explanation.

That's your choice. It's your business.

But let's be clear about something:

You're not a "privacy registrar."

You're a domain registrar that accepts cryptocurrency and has edgy marketing. That's it.

A real privacy registrar would:
- Stand up to abuse complaints (like you claim)
- Protect customers from censorship (like you advertise)
- Fight for privacy principles (like your founder supposedly did)
- Not suspend at the first complaint

You did none of these things.

You suspended us immediately. No warning. No investigation. No standing up for principles.

The Pirate Bay would be disappointed.

Your co-founder built a service that fought governments and corporations for years. You suspended a privacy exchange at the first sign of pressure.

That's not carrying the torch. That's extinguishing it.

---

"Privacy" as a Product vs. Privacy as a Principle

This situation perfectly illustrates the difference:

Njalla:
- Markets "privacy" to attract customers
- Folds when it's inconvenient
- Privacy as marketing term

b1eXch:
- Actually provides privacy (no KYC, no logs)
- Gets attacked for it
- Privacy as core principle

One of these is real. One is performance.

The attacks prove which is which.

---

Current Status

Tor mirror: Fully operational (survived network-level attack)
Platform: All systems working, swaps processing normally
Security: Penetration attempts failed, infrastructure intact
Clearnet: Suspended by Njalla, moving to new registrar soon
User funds: Safe, zero compromised
Our resolve: Stronger than ever

Service interruption: None. Zero downtime.

Use Tor mirror: [your onion link]

---

What We're Doing

Moving to a registrar that actually stands for privacy (recommendations welcome)
Hardening infrastructure based on attack patterns
Implementing additional DDoS mitigation beyond Cloudflare
Continuing to process swaps without interruption
Documenting everything for future reference

What We're NOT Doing

Implementing KYC
Shutting down
Compromising on privacy
Giving up
Trusting Njalla ever again

---

The Bigger Picture

This is exactly why decentralized, privacy-focused services are under attack:

We're a threat.

Not to users. Not to legitimate businesses. But to:
- Surveillance-based exchanges that profit from KYC data
- Blockchain analytics companies that sell "taint" scoring
- Governments that want to track every transaction
- Competitors who can't compete on service so they attack infrastructure

If we weren't effective, they wouldn't bother attacking us.

The attacks prove we're doing something right.

---

To Our Users

Your swaps are safe.
Your privacy is protected.
Your funds are secure.

Nothing has changed on your end. We're processing swaps normally. Use Tor if clearnet is down.

This is just background noise.

We're built for this. Decentralized infrastructure, Tor integration, redundancy - this is exactly why we designed things this way.

---

To The Community

This is what happens when you actually stand for privacy instead of just marketing it.

You get attacked. You get censored. "Privacy" companies abandon you when it's inconvenient.

But you keep building anyway.

Because the alternative is surrendering to surveillance.

And that's not happening.

---

Final Thoughts

Financial privacy is not a crime, but rather a matter of basic common sense.

Every attack confirms this is true.
Every suspension proves the need for services like ours.
Every "privacy" company that folds shows who's real and who's not.

We're still here. We're still building. We're still processing swaps.

And we're just getting started.

See you on the other side of this.

- b1eXch Team

Tor: [onion link] (unaffected, always operational)
Clearnet: Coming back soon (with a registrar that actually means it)

[Lucius]

~snip~
Result:
- Tor network experienced instability (not just us - the entire network)
- Our onion stayed up through it
- Attack eventually subsided
- Tor network recovered
- We're still here
- Attacker success: Zero (but points for effort)

The scale of this attack tells you everything you need to know.

They weren't just trying to DDoS us. They were attacking the Tor network infrastructure itself to get to us.

That's the level of resources being thrown at this.

Those who understand what you mean know very well who could be behind this attack, and there aren't many who can afford something like that. If that is taken into account, it is not difficult to conclude what is next, the same thing that happened with the same service that you are very reminiscent of.

[cLoazyL]

Round 4: Njalla Domain Suspension - The Irony

And now, the cherry on top:

Njalla - the "most notorious privacy domain registrar" - has suspended our clearnet domains.

You know Njalla, right?
- "Privacy-focused domain registration"
- "Protects customers from censorship"
- "Founded by The Pirate Bay's co-founder"
- "Stands up to abuse complaints"
- "Your info stays private"

That Njalla.

They suspended us.

A "privacy" registrar suspending a no-KYC exchange.

The company founded on anti-censorship principles censored us.

We really question their "privacy views" now.

It's very good that they block no KYC exchanges that are linked to carding. Look how many no-KYC services are still operating and don't have their domains blocked. Why do you think that is? Because you're just a common fraudster who profits from the suffering of other innocent people.

[b1ack]

Round 4: Njalla Domain Suspension - The Irony

And now, the cherry on top:

Njalla - the "most notorious privacy domain registrar" - has suspended our clearnet domains.

You know Njalla, right?
- "Privacy-focused domain registration"
- "Protects customers from censorship"
- "Founded by The Pirate Bay's co-founder"
- "Stands up to abuse complaints"
- "Your info stays private"

That Njalla.

They suspended us.

A "privacy" registrar suspending a no-KYC exchange.

The company founded on anti-censorship principles censored us.

We really question their "privacy views" now.

It's very good that they block no KYC exchanges that are linked to carding. Look how many no-KYC services are still operating and don't have their domains blocked. Why do you think that is? Because you're just a common fraudster who profits from the suffering of other innocent people.

This user is currently ignored.

Clearnet domains have been updated to .to tld. b1eXch.to & bleXch.to

[examplens]

Moving to a registrar that actually stands for privacy (recommendations welcome)

Quite disappointing in Njalla.
Do you even have the possibility to transfer domains from them?
It is difficult to find a reliable domain registrar that meets all the requirements for anonymity.

Some of the registries known to have hosted and supported sites with content bordering on legal/illegal.
flokinet.is (maybe a closer alternative to Njalla, hosted Wikileaks)
The-Online.com
alexhost.com

btw. Are you thinking about a backup domain where suspension goes much harder, like .cx, .cy, .cd? There was one campaign where many members were involved in the application for the suspension of domains with such extensions, and it was very difficult.

[b1ack]

Moving to a registrar that actually stands for privacy (recommendations welcome)

Quite disappointing in Njalla.
Do you even have the possibility to transfer domains from them?
It is difficult to find a reliable domain registrar that meets all the requirements for anonymity.

Some of the registries known to have hosted and supported sites with content bordering on legal/illegal.
flokinet.is (maybe a closer alternative to Njalla, hosted Wikileaks)
The-Online.com
alexhost.com

btw. Are you thinking about a backup domain where suspension goes much harder, like .cx, .cy, .cd? There was one campaign where many members were involved in the application for the suspension of domains with such extensions, and it was very difficult.

We have contacted them about transfer of domains.
We are using .to which is the most difficult to take town.

[joniboini]

So this is the reason why there's an update on the clearnet domain. Looks like there'll be more attacks, can't believe someone with that much capital will stop anytime soon. Another service I know also suffered the same DDOS attacks in the past, though not to this extent.

I'm surprised Njalla actually took down the domain with no explanation at all.

[Forsyth Jones]

Infrastructure Under Attack - And We're Still Here

We're facing tremendous attacks on our infrastructure. Let's go through every hit we've taken:

Round 1: Clearnet DDoS

Normal volumetric DDoS attacks on clearnet.
- Attack type: Layer 3/4 packet floods
- Our response: Forced to use Cloudflare
- Result: Clearnet stabilized
- Attacker success: Zero

Annoying? Yes. Effective? No.

-snip-snip-snip-snip-

Last night I found it strange that both the clear and the Tor mirror were inaccessible, as I was about to do a swap and was try out b1exch for the first time, but I wasn't worried because I knew it was something temporary.

Now we know it was an expensive and complex targeted attack, where b1exch contained every breach and made na statement the next day reassuring customers.

This shows us that you are very professional and constantly prepared for any attacks.

Keep up the good work, privacy will prevail!

[NeuroticFish]

Infrastructure Under Attack - And We're Still Here

Stay strong.
The onion page is up and running. And imho, for a non-KYC website, the onion page matters the most.

Of course, also good luck with the clearnet domain/page, since it is useful as advertisement, and keep in mind that annoyances like DDoS are a pretty good sign that you're successful

[DireWolfM14]

Moving to a registrar that actually stands for privacy (recommendations welcome)

Probably the most difficult thing to do these days is to have a digital service wile preserving your privacy and that of your clients.

I'm no using their hosting service, but I do have a KVM hosted by RackNerd.  They might be worth looking into.  They do accept bitcoin for payments, and they offer services designed to mitigate DDOS attacks.

[TokenTikas]

This shows us that you are very professional and constantly prepared for any attacks.

A lot of storms are passing over them, yet they keep fighting to stay strong at all times. They are always trying their best to keep their services running smoothly and this is truly something worthy of appreciation. No matter the kind of problem that comes up, they keep working continuously to provide immediate solutions. With this level of discipline in the way they work, they are fully ready to keep moving forward.

[27coballow]

Very happy with the service offered by this team it's a worthy replacement for exch. Swapped litecoin and the whole thing took about 2 minutes and with low fees. encrypted payment proof is a nice addition, I saw a couple of people got scammed for a lot of money so hopefully this can prevent that.

[ovcijisir]

Is there a plan to receive USDC in the future? Just wanted to buy some BTC for USDC but unfortunately I realized that your service receive them only USDT and DAI stablecoins