U.S. and European authorities say a coordinated crackdown on darknet drug trafficking has produced 354 arrests and more than $234 million in seized cash and digital assets. The campaign, called Operation TorNado, ran from May 2025 to October 2026 across the United States, Europe, Australia, and New Zealand.

The U.S. Department of Justice and Europol described TorNado as the largest operation in the history of the Joint Criminal Opioid and Darknet Enforcement team, or JCODE. Officials said the effort targeted networks selling fentanyl, other opioids, and additional drugs through darknet marketplaces, while also relying on blockchain analysis to identify suspected operators and trace proceeds.

A wide international sweep

According to the Justice Department, Operation TorNado was the sixth international campaign carried out by JCODE, a program established in 2018. Authorities said the operation focused on sellers and buyers using platforms including Archetyp, Bohemia, Nemesis, Kingdom, and Tor2Door.

Across all participating jurisdictions, law enforcement reported the seizure of about 5.7 tonnes of drugs, including fentanyl, other opioids, methamphetamine, heroin, cocaine, and MDMA. Investigators also confiscated 38 pill presses and 209 firearms alongside the cash and cryptocurrency seizures.

U.S. officials said 132 arrests were made in the United States. The United Kingdom recorded 59 arrests, followed by Hungary with 45, Germany with 41, and France with 23. Additional arrests were reported in the Netherlands, New Zealand, Slovenia, Austria, the Czech Republic, Ireland, Finland, and Australia.

Authorities frame operation as a major darknet enforcement push

Senior U.S. officials presented the campaign as an example of cross-border coordination against darknet-enabled drug sales. Attorney General Todd Blanche said the operation had disrupted dark web vendors and would bring alleged traffickers to justice. FBI Director Kash Patel called it the largest interagency action against darknet drug sellers and buyers.

Homeland Security Investigations also said the case showed that the dark web is not a refuge from law enforcement. The Justice Department added that some investigations linked to darknet accounts remain active, indicating that the announced arrests and seizures may not be the final outcome of the wider probe.

BarbaraWhite case highlights blockchain tracing

Particular attention in the announcement fell on a case involving two brothers from Florida, Stanislav and Vladislav Chernyshov. They are suspected of operating BarbaraWhite, a darknet shop accused of selling counterfeit oxycodone pills containing nitazenes, synthetic opioids that authorities said may be as dangerous as fentanyl.

Chainalysis said BarbaraWhite had operated since at least 2020 on the Nemesis, Bohemia, and Abacus marketplaces. Based only on activity visible from those three platforms, the company estimated that the vendor sold more than 95,000 counterfeit pills. It also said the network’s activity was linked to at least 12 overdose cases, including three deaths.

Investigators said blockchain analysis helped connect sales revenue from darknet marketplaces to wallets associated with the suspects. The traced flows included roughly $220,000 in inflows from marketplaces and about $230,000 in outgoing transfers. According to the investigation, recipients included a postal service, another drug vendor, and a Chinese chemical supplier that allegedly received about $7,210. Authorities said those transactions helped tie crypto wallets used by BarbaraWhite to other addresses linked to Stanislav Chernyshov’s mobile payment account.

Other cases and what comes next

Authorities said the broader operation also included the arrest of a vendor known as STARLABS, who investigators allege used the DrugHub marketplace, a platform that supported only Monero. Officials also referred to actions against networks accused of distributing heroin, fentanyl, and counterfeit medicines.

For now, the confirmed next step is the continuation of related investigations and federal prosecutions stemming from the operation. The Justice Department said some darknet-linked accounts are still under investigation, suggesting further charges or seizures could follow as authorities continue to examine financial and marketplace records.

Source: incrypted.com