Nexus Loss Table Ranked by expected cost, not by how frightening it sounds
Table › How money goes

Nexus addresses

Three published addresses for the same market. Copy rather than retype.

nexusb2l73qzjn4slhyfxa3jvpolw7fomiz5sgyyefnsdhikaqgborqd.onion
nexusma2iqgauqqvjcgds4ckv5xbf272tkfagq4epojjhsgleqpwxiqd.onion
nexusabcdrwy7632jfmkfu3f6u7usyw2xn2mcfiljunz6zsj4p5vioqd.onion

This list is published, not monitored. An address that opens is not an address that is genuine.

Locked out of your own account

Whether this is an annoyance or a permanent loss was decided at setup, months before it happened.

How often
Common
Typical size
Whatever is inside
Recoverable
If you saved the material
Cost to prevent
One minute, once

Work through the dull causes first

  1. Verify you are on a genuine address before retrying. A login refusing correct credentials is what a copied page looks like after taking them, and each retry hands them over again.
  2. Try another address. Sessions are shared, so failing at one and working at another points at that address.
  3. Build a new circuit. A dying circuit produces failures that read exactly like rejection, including codes appearing wrong.
  4. Check your clock. Time based codes fail on a drifted machine, which is a surprising share of these reports.
  5. Check the username character by character. Not the password. People change a character and debug the wrong field for an hour.
  6. Wait an hour. Repeated attempts trigger rate limiting, which looks identical to refusal.
The thing that makes it worseDo not go looking for a support contact. There is no email, chat group or messaging account belonging to any market, so everything presenting itself that way is aimed at people in exactly this situation.

The version that is permanent

Recovery works when you hold the material you were given at setup. Without it, recovery is limited and frequently impossible, because the alternative would be a mechanism for taking over accounts you do not own.

That is why this entry costs one minute to prevent and that minute happens months before the problem. Save the recovery material before closing the setup page, keep it separate from the password, do not keep the only copy on one device, and test once that you can produce it.

What makes it expensive

A balance. A lockout with nothing parked is an inconvenience and a fresh account. A lockout with funds sitting there is a permanent loss, which is why rank one and this entry compound each other. Removing either one removes most of the cost of both.

Why access failures look like theft

A hidden service cannot see who you are, so it cannot treat you differently from anyone else knocking on the door. Everything protective it does is behavioural: slowing repeated attempts, refusing bursts, dropping connections under load. From your side those are indistinguishable from a rejected password, and the natural response, trying harder and faster, is exactly what triggers more of it.

The setup minute, written out

  1. Save the recovery material before closing the page. There is no second chance to see it.
  2. Store it apart from the password. Together, they are one secret rather than two.
  3. Put a copy somewhere physically different. A device failure should not be an account failure.
  4. Write down the date and the address you registered at. Both come up during recovery and neither is memorable.
  5. Test once that you can retrieve it without the primary device.
How accounts usually endA lockout is the ordinary end of most accounts. Not seizure, not fraud, just a device replaced, a file lost, or a password changed in a hurry and never written down. Planning for the boring ending is worth more than planning for the dramatic one.