They exploited a vulnerability in the tor protocol. There's an argument to be made that connecting to the tor network but not complying with the protocol is a v

They exploited a vulnerability in the tor protocol. There's an argument to be made that connecting to the tor network but not complying with the protocol is a violation of the CFAA, if done in a malicious way. If you wiretap your entire neighborhood, find a bike-theft ring, and call the cops, you'll also get in trouble.