I believe you may be referring to a Sybil attack, e.g. https://blog.torproject.org/blog/tor-security-advisory-relay-early-traffic-confirmation-attack https://bl

I believe you may be referring to a Sybil attack, e.g. https://blog.torproject.org/blog/tor-security-advisory-relay-early-traffic-confirmation-attack https://blog.torproject.org/blog/tor-security-advisory-relay... Tor users should know that Tor design doesn't try to protect against an attacker who can see or measure both traffic going into the Tor network and also traffic coming out of the Tor network (e.g. a three-letter agency with near infinite budget running many nodes).