Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →Dread’s onion addresses were reportedly diverted to pages promoting a rival forum, but that does not by itself establish that anyone breached Dread’s server or accessed its user data. ZATAZ says it observed two address diversions; a Reddit repost of a statement attributed to Dread administrator Hugbunter blamed an onion private key apparently included in a GoBalance software archive. The explanation and the operator’s denial of data access have not been independently authenticated in the reporting available here.
What happened to Dread?
Dread is a darknet discussion forum. A peer-reviewed study by Logie and Das dates its launch to February 2018 and describes public and invite-only areas covering topics including darknet markets, hacking, identity theft, fraud and drugs. That study provides background, not evidence about this incident.
As an Amazon Associate I earn from qualifying purchases.
In an October 7 report, Damien Bancal’s ZATAZ says Dread’s primary onion address was diverted on October 5, then a later alternative address presented as safe was diverted as well. ZATAZ reports that both pages promoted a rival platform and says it observed the diversions in real time. The report supports the claim that two addresses displayed redirected pages; it does not establish what happened inside Dread’s infrastructure.
Recommended Free Tools
What did the administrator reportedly say?
A Reddit discussion reposts a statement attributed to Hugbunter, identified there as a Dread administrator. The statement says a recent GoBalance update archive was the wrong package and apparently included an onion private key that should have remained local. It calls this a serious operational mistake, says the old address should be considered retired, denies a server breach and user-data access, and warns that someone holding the key could use the address and create man-in-the-middle risks.
#1 Best Overall
“Unfortunately, it appears that a recent upload of an updated archive for the GoBalance software, was the wrong package containing, what should have only ever remained local, our onion private key.”
This wording comes from the Reddit repost; the attribution has not been independently authenticated. The key-leak explanation and denial of access should therefore be understood as the operator’s reported account, not independently verified findings.
Does control of an onion key mean Dread’s server was hacked?
No. Control of an onion service’s private key and access to its backend are separate questions. As the statement attributed to Hugbunter explains, possession of the key could let someone use the associated address and create impersonation or interception risks. That possibility does not prove that the person reached Dread’s origin server, database or user records, or that traffic was actually intercepted.
The reporting gathered here does not independently confirm a server compromise, database access or theft of user data. The attributed administrator statement denies those outcomes, while other user claims in Reddit discussions remain unverified. A reported message using language about control of “all data” is not proof that data was obtained.
What is known about the second address and current status?
ZATAZ reports that a later alternative address was diverted after the primary address and says it witnessed both diversions. A separate Reddit discussion posted October 7 raises concerns about a second address and possible access, but it is an anonymous user account rather than independently verified technical evidence. The sources available do not settle the current status of either address or the final scope of any access.
The exact current onion address is not included here because it is volatile and has not been independently authenticated. Treating an address circulating in a forum thread as confirmed would risk sending readers to an impersonating page.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What should readers conclude?
- Address diversion: ZATAZ reports two observed diversions, first the primary address and then an alternative.
- Key leak: The explanation involving a GoBalance archive comes from a statement attributed to Hugbunter in a Reddit repost.
- Backend or data access: Neither server compromise nor user-data theft is independently established by the cited incident reporting.
- Resolution: The reports do not confirm whether the addresses were recovered or what the ultimate impact was.
A Tor Project forum notice dated October 5 describes a separate incident involving unauthorized access to some relay operators’ Linux hosts and relay configuration changes. It concerns Tor relays, not Dread, and is not evidence about Dread’s servers.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Quick Recap
Best Value
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
