Key point:  this was not an attack on, or a vulnerability in, Tor proper.  Someone cracked one of the servers that happened to be a Tor infrastructure box.<p>The system got shut down when the developers discovered it, the identity keys were changed, and damage should be minimal or non-existent.