DEV Community

Daniel Ioni
Daniel Ioni

Posted on

🚀 MyZubster: Building a Decentralized Marketplace with Monero, Kali Linux, AI, NFTs, and Tari

#ai #kalilinux #blockchain #monero

💡 What Is MyZubster?

MyZubster is a full‑stack, decentralized marketplace where anyone can tokenize real‑world assets – real estate, art, equity, commodities – and trade them in a private, peer‑to‑peer environment. Payments are handled with Monero (XMR) for complete privacy, and the entire system is protected by an AI‑powered security bot that runs Kali Linux tools and analyzes threats locally.

But it's not just a marketplace. It's an ecosystem that combines:

✅ Fungible tokenization (ERC‑20 style)

✅ Private Monero payments

✅ Self‑defending security with Kali Linux + DeepSeek (local AI)

✅ NFT support (with Tari programmability on the roadmap)

✅ Tor onion service for censorship‑resistant access
Enter fullscreen mode Exit fullscreen mode

In this post, I'll walk you through the why, how, and what's next – including the architecture, the integrations, and the challenges we overcame.
🧱 Architecture Overview
text

┌─────────────────────────────────────────────────────────────────────┐
│ MyZubster │
├─────────────────────────────────────────────────────────────────────┤
│ │
│ ┌──────────────┐ ┌──────────────┐ ┌──────────────────────────┐ │
│ │ Tokenization │ │ Monero │ │ Kali Linux + AI Bot │ │
│ │ (Fungible) │ │ Payments │ │ (Security & Automation)│ │
│ └──────────────┘ └──────────────┘ └──────────────────────────┘ │
│ │
│ ┌──────────────┐ ┌──────────────┐ ┌──────────────────────────┐ │
│ │ NFTs + Tari │ │ Tor Onion │ │ DeepSeek (Local AI) │ │
│ │ (Programm.) │ │ (Privacy) │ │ (Assistant & Analysis) │ │
│ └──────────────┘ └──────────────┘ └──────────────────────────┘ │
└─────────────────────────────────────────────────────────────────────┘

All components run on a single Ubuntu VPS, with Node.js/Express for the backend, MongoDB for storage, and React/Vite for the frontend.
🪙 1. Fungible Tokens – The Core Marketplace

We built a full tokenization engine:

Create tokens with metadata: name, symbol, total supply, asset value, price, asset type (realestate, equity, art, commodity, debt, revenue), description, location, and contract address.

User holdings – track amount and lockedAmount (for open orders).

Order book – sell, buy, and cancel orders.

Reputation system – each completed trade awards points (seller +10/token, buyer +5/token).
Enter fullscreen mode Exit fullscreen mode

All data is stored in MongoDB and exposed via a RESTful API with JWT authentication.
💰 2. Monero – Private Payments

Monero guarantees true privacy – no traceable addresses, no visible balances. We integrated it deeply:

Wallet RPC – connected to a remote node (stagenet.community:38081 for testing).

Subaddress generation – each order gets a unique, one‑time address, so payments are never linkable.

PaymentMonitor – a background service that scans every 30 seconds for incoming transfers.

Automatic order completion – when a payment is confirmed (10+ confirmations), the order is automatically marked as filled and tokens are transferred.
Enter fullscreen mode Exit fullscreen mode

We used axios to call the Monero RPC and get_transfers to match incoming payments.
🤖 3. Self‑Defending Security – Kali Linux + DeepSeek AI

Security isn't optional for a platform handling real assets and private transactions. Instead of relying on passive tools, we built an autonomous security bot that:

Scans the gateway every hour using Kali Linux tools (nmap, nikto, sqlmap).

Analyzes the results with a local AI model (DeepSeek R1:1.5B running on Ollama).

Acts automatically:

    Blocks suspicious IPs via ufw

    Suspends users with low reputation

    Cancels open orders from compromised accounts

    Generates security reports
Enter fullscreen mode Exit fullscreen mode

All processing happens locally – zero data shared with third parties, zero API costs.
Why DeepSeek?

We chose DeepSeek because it's:

✅ Open‑source (MIT license)

✅ Lightweight enough to run on CPU (1.5B parameter model)

✅ Available locally via Ollama – no API keys, no credit usage

✅ Privacy‑first – data never leaves the server
Enter fullscreen mode Exit fullscreen mode

🖼️ 4. NFTs and Tari – Programmability for Unique Assets

We already have an NFT model in the database and a frontend page (/reputation) to display user‑owned NFTs. But we're going further:

Tari – a programmable sidechain for Monero – will allow us to:

    Issue NFTs with on‑chain logic (e.g., automatic royalties, transfer restrictions).

    Create AI‑powered confessional robots (NFTs that hold an AI persona and can interact with users).

    Manage complex asset rights (e.g., fractional ownership, dividend distribution).
Enter fullscreen mode Exit fullscreen mode

While Tari integration is still in design, the foundation is ready.
🛠️ 5. Tor Onion Service – Censorship‑Resistant Access

To ensure MyZubster is accessible even in restrictive regions, we exposed it as a Tor onion service. Due to provider restrictions, we're migrating the onion service to a new VPS, but the clearnet site (https://myzubster.com) remains fully operational.
🧪 How to Test the Payment Flow (Stagenet)

Register a user.

Create a token (or use an existing one).

List a sell order.

Initiate a payment via the API – a unique Monero subaddress is generated.

Send XMR to that address (from a stagenet faucet).

Wait – the PaymentMonitor will detect the transaction and automatically complete the order.
Enter fullscreen mode Exit fullscreen mode

🔄 Current Status & Roadmap
Component Status
Fungible Tokens ✅ Fully functional
Marketplace (order book) ✅ Fully functional
Monero Payments (stagenet) ✅ Fully functional
NFT model + frontend ✅ Partial (trading missing)
Tari integration ❌ In design (roadmap)
Kali Linux + AI bot ✅ Fully functional
DeepSeek (local) ✅ Fully functional
Tor onion ⏳ Migrating to new VPS
SSL/HTTPS ❌ To do
Admin Dashboard ❌ To do
Immediate Next Steps

✅ Integrate NFTs into the marketplace (/api/nfts).

✅ Add SSL via Let's Encrypt.

✅ Switch to Monero mainnet after thorough testing.

✅ Build an admin dashboard.
Enter fullscreen mode Exit fullscreen mode

Long‑Term Vision

AI‑powered dispute resolution – using DeepSeek as an impartial mediator for escrow and disputes.

Tari smart contracts for advanced asset management.

Multi‑currency support – Bitcoin, Ethereum, and more.
Enter fullscreen mode Exit fullscreen mode

🙌 Contribute!

MyZubster is open‑source, and we welcome contributions of all kinds:

🐛 Bug reports

💡 Feature ideas

🔧 Pull requests
Enter fullscreen mode Exit fullscreen mode

GitHub: DanielIoni-creator/MyZubsterGateway
Live Demo: https://myzubster.com
X (Twitter): @myzubster
💬 Final Thoughts
https://www.linkedin.com/in/daniel-ioni-62b2b9423/

Building MyZubster has been one of the most challenging and rewarding projects I've ever worked on. We've combined traditional web development with blockchain, privacy tools, AI, and security automation – all into a single, open‑source platform.

The system is now stable, self‑defending, and ready for real‑world use. Whether you're a developer, a privacy advocate, or just curious about the future of decentralized finance, I invite you to explore, test, and contribute.

The future is private, programmable, and protected. MyZubster is just the beginning.

Built with ❤️ by the MyZubster team.
🏷️ Tags

NodeJS #React #MongoDB #Monero #KaliLinux #DeepSeek #Tari #NFT #Blockchain #Privacy #Cybersecurity #AI #OpenSource #BuildInPublic

Top comments (0)