Iirc the attack involved setting up an exit and a relay, then sneaking a message through, so it could tell when a circuit connected to both, and thereby deanony

Iirc the attack involved setting up an exit and a relay, then sneaking a message through, so it could tell when a circuit connected to both, and thereby deanonymize users.