Summer 2026 DDoS wave, three days of queue pressure
A case study on a specific coordinated pressure event and how Nexus absorbed it.
Across a weekend in early July 2026, Nexus Market experienced coordinated network pressure lasting roughly 72 hours. The queue held. No rotation was required. This case study documents what happened and what the reader saw.
Onset
Late Friday afternoon UTC. Queue times on the primary mirror extended from the typical 30-60 seconds to about 2-3 minutes. Backups initially held at normal times, suggesting attackers had concentrated on the primary address.
Peak
Saturday evening UTC. Primary queue reached about 4 minutes at peak. Backup 1 reached about 2 minutes. Backup 2 held around 90 seconds throughout.
Reader impact
Readers on the primary during peak reported successful sessions after waiting the 4-minute queue. Readers who switched to backups typically completed sessions faster. No reader reported a fully failed session across the window that lasted longer than one retry.
Bureau inbox during the event
About 40 reader letters over the 72-hour window. Roughly half asking whether the market was down. Roughly a quarter reporting queue times and asking whether the operator was aware. A quarter reporting they had bought a listing and wanted to know if the order would still process (yes, it did).
Operator response
Around 24 hours into the event, the operator posted a signed note on the pinned Dread thread acknowledging the wave and noting the queue was working as intended. No rotation was announced. No infrastructure change was made. The event ended on its own within about 12 hours of the note.
Post-event observations
No mirror addresses were rotated in the following two weeks, so the operator did not judge the event as compromising any specific address. The captcha continued to render correctly throughout. No security advisory was published because the event did not compromise any reader account, credential, or transaction.
Bureau read on the event
The queue mechanism worked as designed. Multiple mirror addresses gave readers viable alternatives when the primary slowed. The operator's public acknowledgment reduced reader confusion. The whole event is an example of a coordinated pressure attempt being absorbed without any structural damage.