The Evolution Exit Scam: How $12 Million Vanished and Wrote the Playbook
One morning in March 2015, the largest darknet market on Earth stopped answering. No seizure banner, no farewell post, no maintenance notice. Just silence where an empire used to be.
An Empire Built After Silk Road Fell
Evolution launched in January 2014, founded by two operators known as Verto and Kimble -- the same handles behind the earlier Tor Carding Forum, a fraud community that had already gone dark on its own users once before. That detail would matter more than anyone admitted at the time. After the Silk Road seizure in October 2013 and the Operation Onymous takedowns that followed, buyers and vendors were hunting for a stable home. As WIRED reported, Evolution had claimed Silk Road's place at the top of dark web commerce within eighteen months. By late 2014 it worked. Researchers counting listings found Evolution holding close to half of all product listings across the major markets, rivaling Agora. Tens of thousands of bitcoin sat in its centralized escrow at any given moment.Trust Quietly Replaced Cryptography
The platform technically offered multisig escrow, which requires multiple parties to sign off before any funds move. Almost nobody used it. It was clumsy, direct deposits were easy, and faith in the brand felt safer than fumbling with keys. That convenience was the vulnerability. A centralized escrow is only as honest as whoever controls the wallet, and on Evolution that was always the operator. Everyone knew this. Almost nobody acted on it.The Week the Payouts Stopped
Trouble surfaced over the weekend of March 14-15, 2015, when vendor withdrawal requests began taking days instead of minutes. Staff blamed an unexpected flood of large payout requests and assured anxious vendors that everything would clear within twenty-four hours, as KrebsOnSecurity documented. Deposits kept processing smoothly throughout. Money flowing in while payouts stall is the textbook shape of an operator emptying accounts before walking away. Before the promised deadline arrived, the marketplace and its forum went dark on March 17.The Confirmation Came From Inside
NSWGreat, a moderator and public liaison for the site, settled the question in a Reddit post: not a single withdrawal had cleared in nearly a week, and the liaison had confronted the administrators directly.They said they are doing it right now... I have over $20k of my own sales money trapped in escrow.According to that account, Verto and Kimble confirmed they were exiting. The post apologized to the community for having vouched for the site. Whatever else was true, the messenger was also a victim -- and the first credible witness in darknet history to watch an eight-figure theft happen live.
Following 43,000 Bitcoin Out the Door
Observers tracked the money on the public blockchain in real time. Analysts watching the address cluster tied to the market tallied roughly 43,000 BTC drained -- around $12 million at the time, with one coin trading near $270, as tallied by Finance Magnates and covered by The Guardian. Later price moves would make that figure look absurdly small. In March 2015, it was the largest confirmed theft from an escrow system of its kind, and the cleanest: no hack, no raid, just the operator holding the keys. A farewell message attributed to Verto circulated within days, cheerfully admitting an eight-figure profit. It was widely judged to be fake, which somehow made everything worse. Doxing bounties and threats followed. Nobody ever found anyone.The Blueprint Case Study
It was not the first scam of its type -- Sheep Marketplace had collapsed amid near-identical suspicions in late 2013. What made Evolution different was scale and credibility. It proved that reputation itself is the asset an exit monetizes. The fallout rippled outward:- Traffic and inventory flooded to Agora, which shut down voluntarily five months later under sustained infrastructure attacks.
- Confidence in centralized escrow never recovered, and multisig usage ticked up across successor markets.
- No arrests ever followed; Verto and Kimble have never been publicly identified or charged.