It&#x27;s covered in this blog post[1]. Some mitigations are in place now.<p>[1]: <a href="https:&#x2F;&#x2F;blog.torproject.org&#x2F;blog&#x2F;tor-security-advisory-relay-early-traffic-confirmation-attack&#x2F;" rel="nofollow">https:&#x2F;&#x2F;blog.torproject.org&#x2F;blog&#x2F;tor-security-advisory-relay...</a>