Darknet Drug Vendor FireBunnyUSA busted
Published by Ethan on Sat, Feb 18, 2023 | Tagged Arrest, Drugs, Vendor | 87 Comments

According to the indictment unsealed by the Manhattan District Attorney on February 17, 2023, one of the largest-ever dark web drug peddling operations — raking in $7.2 million through cryptocurrency exchanges — has been shut down, and its Queens ringleader and four others have been charged.

Nan Wu, 35, and four accomplices, Peng Peng Tang, 30, Bowen Chen, 38, and Zixiang Lin, 22, are accused of shipping over 10,000 packages of cocaine, MDMA, ketamine, and other substances to customers in all 50 states and Washington, D.C. Together they operated the dark web vendor “FireBunnyUSA,” and laundered $7.2 million through cryptocurrency exchanges. Wu’s team helped to ship the packages by purchasing shipping materials and renting U-Hauls and storage facilities, prosecutors said. They were assisted by USPS employee Katie Montgomery who provided advice about importing drugs into the United States and checked on the status of packages.

FireBunny operated from multiple dark web marketplaces from January 2019 to August 2022, describing itself as an “old vendor with the best in QUALITY SPEED OF DELIVERY and STEALTH.”

A market listing picture used by FireBunnyUSA

Between June 2021 and August 2022, undercover Manhattan DA investigators made 11 purchases from FireBunny. Investigators executed a search warrant on Wu and Tang's apartment in July 2022. Wu was arrested and taken into federal custody on an open warrant for prior drug charges. Investigators also recovered 1 kilogram of Ketamine, more than 1,200 MDMA pills and other drugs and packaging supplies.

After the July 2022 search warrant, FireBunny temporarily suspended operations. Eventually, Chen continued Wu’s work in California until a search warrant was executed at his residence in August 2022.

Phones recovered from Wu and Tang contained extensive evidence of Wu’s operation, including communications with suppliers concerning the importation of Ketamine and MDMA, and communications with customers on the encrypted messaging applications Wickr and Telegram. Investigators also found nearly $900,000 worth of cryptocurrency on Tang’s phone.

scroll to the bottom or reply to comment
e7d8fd08fa
ChatTor
Sat, Feb 18, 2023

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

>ChatTor

RE: "$900,00 worth of cryptocurrency on Tang’s phone"

Now that's some carrying around money!
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEB5NMUWrBM9ri0d6Y57iCbL1TvYoFAmPw8vUACgkQ57iCbL1T
vYqISw/+LgFpfHOdNbl8Qz7ltkmMDPPWwN3TI+TqnAq2Fg7lJReUtIMh6DwavQqi
jbM4TEjmEDV6etFY0BQL8AZjviRgot6blThp9oDpI+R2snWXMv80/bDTTt+s8Th7
cs0v+MqB9wdAa2KEqiR4VHE5ZbTdGANyh027Man7dijux6icD8zZAGMVKUeu9ONZ
KBUxqZ8TckwFBxHZuJ3NQ2M8VwDKow0OYbRecHzVC9yh3cNJGnKJlvGw1b3nnUJN
WhQcaYUBUydviAYhKqyJUaxUCsgky/3RumJRKOlCXi8RxGvFHXtkw4HQqcy6/QC9
/0fMu2/axCkGltiasmFwu7Hy00F6eA8Yg8CCqBlO/koWEPZ/Avf2eTNzQoNJq5rj
Vh3c9uqkAOz8o18jFmjIRvf87fxpjdHhvAbUVgBk9a33DBavD41UxnJk2EMGXgpA
i7g1/hevTN2ymEMdbpVeg+dMCDZBFvt42zbOZXDPmHN7lgDMBIW6pxi45BMtEuC5
00hWPmVzCwddPZ6Tkj9xKzDzJPBWcihCq0dRba7bv/i4yiH4cfhdsQEnXDFe4Qeq
a+KUheFFdomk3rUKOFtlEBOZ/GNwiojP+Hknl90S9dd7qXMQm/FYZwFbABe4JEQs
3PiW+Tb5ybuzMluXj62cBKNeBVmdt8r5XN9yYAIP18e5SVj/Yvs=
=Z4L5
-----END PGP SIGNATURE-----

New comments are disabled for this page.
910654c672
ethan
A
Sat, Feb 18, 2023

A bug fix will come soon

1eb04ca48e
1eb04ca48e
Sat, Feb 18, 2023

Ethan, it's such a nonsense, it probably really is $900,00 as if 900 hundreds and NO cents. Well it's in the indictment like that at least. It's strange.

9eecffd290
PrX
Sat, Mar 18, 2023

PrX Service

Join To Our Channel For Get Free Private Combolist HQ

USA Combolist [ Yahoo , Hotmail , cox , Erthlink ]

USA Accounts [ Facebook Code 8 ] [ Facebook ADS ] [ Yahoo US ]

Europe Combolist [ All Countries ]

Countries avabile: USA , FR, DE, Pl, NL, CZ, UK, mix

Selling Mail Acces Combos, ( Shopping )

( Zalando , Aws , Amazon , eBay )

Zalando Cartable Accounts

Aws USA / Canada

For Free Combolist Join To Channel PrX

t.me/ComboPrX

For Buy Contact : t.me/ComboPrXManager

082b792cb3
fireketusa
Sat, Feb 18, 2023

Rip to a real one, his k was bar none to anyone else.

New comments are disabled for this page.
d02b509dbe
runrunrun
Sat, Feb 18, 2023

stop typing and CLEAR HOUSE

7a7698db13
7a7698db13
Sat, Feb 18, 2023

Most people say he sold 2fcdk or some other RC not real ket, well known fact.

27bc13abaa
rip FB
Sat, Feb 18, 2023

This is most likely due to the incompatant practices of Checkpoint smh.

I look forward to learning the details in this for education purppose

New comments are disabled for this page.
800f7b0655
urmum
Sun, Feb 19, 2023

what does this have to do with checkpoint? as far as I could tell he never really had CP products?

d41d9ccbd3
whatsupwithCheckpoint
Sun, Feb 19, 2023

I am curious as to what happened to several vendors CP was working with , Juice Dance , DiscoXX , Narco710 , OMGcheckpoints, and im sure im missing some more have all gotten busted or went MIA shortly after stocking his products....

c04a5b42fc
mdmabunny
Thu, Feb 23, 2023

firebunny didn't source from checkpoint, he didn't have to.

Never understood why anyone would get ripped off overpaying for checkpoints when there are far better pill titans in EU that ship checkpoint quality product as opsec pros. Checkpoint's shipping opsec was like that of a rank amateur.

And we know what happened to Narco and OMG. Narco got popped while the latter changed his name and started selling alternatives after finding CPs too costly and increasingly difficult to source. Things would have to get pretty dire sourcing checkpoints to take that extreme step.

701e990c9e
701e990c9e
Sat, Feb 18, 2023

The arrests will continue until the opsec improves

New comments are disabled for this page.
1d35e3cd3f
K M F D M
Sat, Feb 18, 2023

The beatings will continue,until moral inmproves

ced6fa8f91
ced6fa8f91
Wed, Mar 29, 2023

Yeah

642c8ab952
642c8ab952
Sat, Feb 18, 2023

It still shocks me... all over Dread or pretty much any opsec guide says: "NEVER USE YOUR PHONE" OR "WICKR/TELEGRAM = BAD" yet vendors still fail and use this shit? Like WHY? Yeah sure, I get it. Comfort. But fuck comfort dude. You exchange comfort for dozens of years in jail, is it worth it to you? So sad.

New comments are disabled for this page.
c3398b8301
Daddy
Sun, Feb 19, 2023

We're not living in the stone age son. You're not going to make much money if you never use your phone.

4c38dd9b14
Daddy
Sun, Feb 19, 2023

We're not living in the stone age son. You're not going to make much money if you never use your phone.

8319b77d19
ThreatnoSociety
Mon, Feb 27, 2023

Yeah but they could easily use safer chatrooms

4c724e73c7
chrisbrownhitrihanna
Fri, Mar 3, 2023

I've seen so many obvious cops on here trying to fish vendors into using wickr, telegram or whatsapp

41b1aba92c
clockwerk2021
Sat, Feb 18, 2023

Wickr is bad, Im always a Bit perplexed that it remains As popular in Our community as it dose. I get it,The markets are un reliable,and there Is no longer a Fourm like dread to re-connect With clients. But there are a Plether of tor Based email services. Im sure in this situation There is more Than wikr that Brought these young Chaps down. Also opperating where They did is very dangerous,You are basicly in the Backyard of the Most equipt /funded and determened LE org. You see how the CB;s where sent to Manhattan/SDONY ? thats no mistake. Hopefully These geezers had a Attorney plan inplace and the Quid to pay them, And didnt blow most of The elusive saving at foxwoods.

New comments are disabled for this page.
b1cd7f49a7
b1cd7f49a7
Sat, Feb 18, 2023

Your writing is unique enough to identify you using stylometry. The NSA is using it on all PRISM providers, so if you type in Apple, Google, Facebook, and others they can link this specific post and handle to you. It's not enough for a conviction but that's what parallel construction is for.

f34acea18e
f34acea18e
Sat, Feb 18, 2023

@b1cd7f49a7

This is more difficult than you think it is, but yes it's a concern and most people don't really give it much thought. But so are your online times and/or routine and this I consider as something way more dangerous.

2d3f7d86f4
OpsecTips
Tue, Feb 21, 2023

@b1cd7f49a7

This is what SEO copy spinner scripts are for. Should be a standardized part of opsec rules at this point.

Type your stuff, pipe to the script, pipe to gpg and echo a copy to terminal for sanity check

bae8bb807a
chat
Sat, Feb 18, 2023

Using wickr on operations of this size? ouch

New comments are disabled for this page.
5ed0be4e92
5ed0be4e92
Sat, Feb 18, 2023

Mfs dont know what Briar or Session is... Feds were going to get them at that point...

New comments are disabled for this page.
2189c030ab
Sn0wd3n
Sun, Feb 19, 2023

There's no perfect secureIM. They all have their flaws.

fd81a6d56b
Dingdong
Tue, Feb 21, 2023

@Sn0wd3n what's their flaws?

b1eceb7e05
BriarBad
Tue, Feb 21, 2023

@Dingdong Well for one: both Briar and Session were built in conjunction with Federal authorities... so they've been compromised since literally their inception

7de2ae31af
7de2ae31af
Wed, Feb 22, 2023

>so they've been compromised since literally their inception

@BriarBad you got any facts to back that up?

ac470eb5bd
Sn0wd3n
Thu, Feb 23, 2023

Session decided to scrap Perfect Forward Secrecy (PFS) from their code base. Why? PFS is a proven hardening measure that was present in the code from the initial fork from Signal and deployed for years they suddenly decided to scrap it under weak pretenses. Session is developed in Australia which has gone hard authoritarian in their data laws since there is no fundamental right to privacy in the Australian constitution. They passed a law (Assistance and Access Act) in 2018 that gives their gov the right to force companies to backdoor their encryption protocols for LE access. Look it up.

Hard to see Session's inexplicable scrapping of PFS as anything but a concession to increasing domestic and international pressure from LEA to introduce a systemic weakness into their code base.

Briar is weak because barely anyone uses it. Its numbers have to reach a certain critical mass to ably obscure your identity and give you a measure of anonymity.

69d9fbae1c
PhillyHero
Sat, Feb 25, 2023

@Sn0d3n

For one you fucking can not cant create any dam phone service secur or otherwise or secure messaging service without the feds demanding a backdoor. if u dont they hella destroy your business and it never gets off the fucking ground. bit o wisdom you learn by doing or knowing dose dat do.

look at telegram, made by niggas from russia that were in their 3 letter agencies and THEY ASK 4 YO DAM NUMBA BOY! YOU DUMB? Fones r government spy devices. Y u think google, twitter, facebook, amazon, and every other "private" company has ex government agency boys on dey board? Why do you think majority o they money is made from government contracts, usually dem data? USE YO HEAD

b217243fa6
Telegriddlecakes
Thu, Mar 2, 2023

@PhillyHero

Telegram is encrypted from your phone to Telegram's servers but not from phone -> phone. Telegram has decryption keys for everything.

https://nitter.nl/moxie/status/1474067550686236698

b038914d79
69x
Fri, Mar 10, 2023

@BriarBad Sn0wd3n

Then what is a safe way to communicate?

48378a4856
Goodbye fire bunny smh
Sat, Feb 18, 2023

Wu Tang lol

New comments are disabled for this page.
cc1990b7ff
maximize
Sat, Feb 18, 2023

I mean let's be real, they had to start a business together. But they only arrested Wu. They never get Peng Peng Tang.

e4e6e48416
My Balls
Sat, Feb 18, 2023

Cya buddy

New comments are disabled for this page.
83b15735a6
83b15735a6
Sat, Feb 18, 2023

B

New comments are disabled for this page.
f86ab7d9c9
Alieno
Sat, Feb 18, 2023

R.I.P.

New comments are disabled for this page.
8941087c5d
8941087c5d
Sat, Feb 18, 2023

RIP

New comments are disabled for this page.
d1a75ee2ca
Wutang
Sat, Feb 18, 2023

Wu and Tang, really?

New comments are disabled for this page.
7667bf0a56
7667bf0a56
Sun, Feb 19, 2023

it wouldve been poor opsec to name themselves the wutang clan no matter the urge they probably had.

87b0de4420
Wutang
Sun, Feb 19, 2023

Yeah i was thinking the exact same thing, yeah that would be a fail

8a9ea0bfed
urmum
Sun, Feb 19, 2023

at what point do you stop vending ? these multi million dollar vendors and don't decide to go legit ever like what

New comments are disabled for this page.
54ebc1986d
VendFastDieYoung
Thu, Feb 23, 2023

ikr they could even just aim for a modest 1% a week on their 7 million which is 70k

they must love the thrill and the chase and the lifestyle of vending

what are they thinking using telegram LUL

c8c54d4f23
Hi
Sun, Feb 19, 2023

anyone wanna be my friend ?

New comments are disabled for this page.
79d36b3250
79d36b3250
Sun, Feb 19, 2023

you gotta go down real low and never come back up

95ddcb29c7
Hello
Sun, Feb 19, 2023

sure. Hi buddy! :D

8d7ee98298
alias
Sun, Feb 19, 2023

Real horny hearing this news. I wish i knew how to code and start this business on deepweb

New comments are disabled for this page.
b72858f288
Raekwonthechef
Sun, Feb 19, 2023

CAN I GET A WU-TANG FLIP THE SCRIPT N TELL MY NIGGAZ THEY SLIPPIN

SUUUU ITS THE FALL OF THE WU

New comments are disabled for this page.
beb36c9371
TangWu
Sun, Feb 19, 2023

Wu tang is forever, motherfuckers.

0528a7b0cd
0528a7b0cd
Sun, Feb 19, 2023

suck my dick

New comments are disabled for this page.
b99fc877e9
uhavaVAGINA
Fri, Feb 24, 2023

what dick?

08c8234fa7
08c8234fa7
Sun, Feb 19, 2023

Purify that MDMA. jesus...

New comments are disabled for this page.
6ce7e2e029
6ce7e2e029
Thu, Feb 23, 2023

True, as a european, that looks like the biggest shit ive ever seen

911236eb16
DeSanek
Sun, Feb 19, 2023

DeSanek here, if you see my brat DeSnake, let him know we are hanging out at his beach house.

New comments are disabled for this page.
2591847c57
faklsdkasd
Sun, Feb 19, 2023

Should never use your phone if your big on the DN. They all should have had a PC tower with Qubes on it and only have communicated by email with PGP. Last I heard Wickr was bought by the febs.

New comments are disabled for this page.
c493e605c9
snobbydrugE
Mon, Feb 20, 2023

He sold notoriously shitty drugs. "GHB" with undisclosed concentration was 1,4-BDO and his ketamine was 2F-DCK.

Good fucking riddance

New comments are disabled for this page.
931a38df66
62lhdjEw
Tue, Feb 21, 2023

Bunny started out fine but the quality declined over the months and years. Another dealer who got greedy, started cutting his shit, then selling straight up fake product. Good riddance indeed.

48488b6a1b
48488b6a1b
Thu, Feb 23, 2023

not surprising given their names :D

30b97d45af
sorrybut
Mon, Feb 20, 2023

Good riddance, they kept selling cut/weak stuff at a crazy high price. Also they were so greedy like hw many millions do you need before quitting the dope game?

New comments are disabled for this page.
e42322cdf3
e42322cdf3
Mon, Feb 20, 2023

DONT trust reviews on any market!

There are so many fakes, and negatives are deleted!

New comments are disabled for this page.
1b12034078
primelime
Mon, Feb 20, 2023

I have a suspicion that this vendor went by several pseudonyms such as alipapa or gastunnel. Exact same packages were coming from Queens, medium to low quality ket and I could tell SEVERELY cut with something else. I also suspect they were posting fake reviews both on the markets and on dread because this was definitely bunk ket at $60-70/g and rotated pseudonyms because people were inevitably calling them out on it. Best of luck to them, but this feels like karma.

New comments are disabled for this page.
5d48cd5108
afaf3111f1f11
Tue, Feb 21, 2023

im looking for klaasflakko

New comments are disabled for this page.
fd51771515
NotACop
Tue, Feb 21, 2023

@Daddy - glowie. Enjoy rotting in prison.

New comments are disabled for this page.
fb64b3812e
checksum2fdc
Tue, Feb 21, 2023

Their ketamine was ok at first, could have been 2F-DCK but works for me... then it was severely cut. But now I know that was when this was going down. So still feel bad for them.

On a selfish note... if I bought from them on Alphabay and pgp encrypted my shipping address but used my real name, should I be worried?

New comments are disabled for this page.
f23b3817a2
almost busted
Wed, Feb 22, 2023

@urmum

You will see when this case goes to trial and discovery becomes foi.

Checkpoint has some bad opsec practice. If I say anymore..... lets just all watch and see what happens.

New comments are disabled for this page.
201018c580
urmum
Wed, Feb 22, 2023

I'm tapped in with some news on checkpoint myself but never saw bunny having checkpoint products.

crazy he was massive plug for 10 years and he's gone now

3561487cc6
urmum
Wed, Feb 22, 2023

if you want to talk send me a session id

3056175d2f
OMGCheckpointsBusted
Thu, Feb 23, 2023

Checkpoint appeared to be pretty hard up for cash when he got 86'd from AB for trying to pressure a buyer to FE. Its hard to fathom why he didn't mind looking like such a douche and scaring away potential new buyers.

05fb4ba41d
seeker
Thu, Mar 2, 2023

@urmum what news? please share.

fb6025e2d1
fb6025e2d1
Wed, Feb 22, 2023

bro fix your i2p address

New comments are disabled for this page.
aba0813040
Hugbunter
Thu, Feb 23, 2023

I didn't doxx firebunny, stop spreading FUD what the fuck are you talking about.

New comments are disabled for this page.
59466b5dd3
Detroit4eva
Sat, Feb 25, 2023

Wickr n Telegram doxxed da niggaz.

u thank dat dey secure?

nigga dey have have keys to open up any message sent thru dems centrilaized server.

Ery real nigga dat trys 2 make a real secure phone or messaging app winds up with a magically bankrupted bidness or comits suiside by shootn dem selvs 5 times in back of dem head like a Clinton whistle blowr. Get real nigga

4ce7dbccce
4ce7dbccce
Fri, Feb 24, 2023

@OMGCheckpointsBusted

CP been a cunty little child since 2014 . He would explode call me a broke piece of garbage then appolgy a day later.

I have a idea what he looks like in my head lol

New comments are disabled for this page.
8c67ec2cd0
OMGCheckpointsBusted
Thu, Mar 2, 2023

Doesn't sound stable. Surprised he lasted 10 years.

0c2f807b68
0c2f807b68
Fri, Feb 24, 2023

RIP

New comments are disabled for this page.
5cf5eed5fd
boofit
Fri, Feb 24, 2023

0x7ecd8013C950d2107A2A503ceD90eF3eaef5e4eC blessings

New comments are disabled for this page.
aa131c7227
aa131c7227
Mon, Feb 27, 2023

Should buyers clean house?

New comments are disabled for this page.
c19504a1a7
c19504a1a7
Tue, Feb 28, 2023

pidgin only

New comments are disabled for this page.
a5907bf1d9
PidginHole
Fri, Mar 3, 2023

Pidgin is full of holes!

https://www.cvedetails.com/vulnerability-list/vendor_id-6938/product_id-11666/Pidgin-Pidgin.html

971fc26028
qqqqqqqqqqqqqqqqqqq
Tue, Feb 28, 2023

firebunny was total crap, heavily cut 2-fdck, snitching on buyers who opened disputes, and straight up scamming people for millions. anyone who ever was simping for fb is stupid.

New comments are disabled for this page.
f40028a2fe
qqqqqqqqqqqqqq
Tue, Feb 28, 2023

none of these markets ever did anything about it either they let him steal 9 million from buyers for ten years till he was busted and only then did they do anything about it and turns out desnake was a theif too lol

New comments are disabled for this page.
e19f7557ea
FaceBookUSA
Fri, Mar 3, 2023

LOL FBUSA was not vending for 10 years. Not even close.

76e6424230
never2
Mon, Mar 6, 2023

FB was a shit vendor anyways. His team lacked dicipline.

New comments are disabled for this page.
b2fb8d7a4a
ferfuxsake
Mon, Mar 6, 2023

No mention of feds finding customer records. Given the opsec failures, wouldn't be surprised if there was a spreadsheet for printing labels in which our names and addresses were kept. Oh fer fux sake, get another po box?

New comments are disabled for this page.
8e083f872b
mkat
Thu, Mar 30, 2023

wutangclan koming atcha

New comments are disabled for this page.
e6d835ae38
ASD
Fri, Apr 7, 2023

Element Matrix is best option for secure talk.

New comments are disabled for this page.

New comments are disabled for this page.
Comments hidden
Sponsored by you!
Donate Mirrors PGP Canary Tor I2P Bible RSS Contact