Can you point to any attack that can be attributed to errors in the Tor code, anything where a rewrite or audit would have helped? Most "attacks" seem to be bas

Can you point to any attack that can be attributed to errors in the Tor code, anything where a rewrite or audit would have helped? Most "attacks" seem to be based on well-known drawbacks of the design which are usually discussed prior to specification or implementation (but unavoidable).