Address rotation confuses people more than any other market behaviour, and the confusion itself is what gets exploited.
Hidden services absorb sustained floods. Running several addresses spreads that load and means an attack on one does not remove the market. Rotating them makes a sustained campaign harder to maintain, since the target keeps moving.
Everything that matters to you. Account, password, balance, order history, open disputes and vendor reputation all live behind whichever address you use, because the addresses are doors into one building rather than copies of a site. Switching mid order costs nothing.
A user finds their usual address quiet, assumes the market is gone, searches for a new one, and signs in on the first plausible result. That sequence is responsible for a very large share of all money lost around markets, and every step of it feels reasonable at the time.
None of that is sophisticated. It is just the difference between the people who find outages boring and the people who find them expensive.
nexusb2l7fmqnefwphyy7m5zjhlkytlbo7qbb5lu5dlczr3azgii2gyd.onionnexusma2iegzo7atzwbrwxhcdopyri3vare2twibldnlc3txqjdeb5yd.onionnexusabcd6tyfhdwilyitaqiri6tisj2v2hueyjuj6qkvd6azvi5tuqd.onionOpen these in Tor Browser only. Before typing a password, compare the onion printed on the login screen against your address bar. If they do not match, close the tab.