I don't think that's some big secret or rumor. Tor has vulnerabilities, namely that it can effectively be de-anonymized by controlling n or n% exit nodes.