The German police have successfully deanonymized at least four Tor users. It appears they watch known Tor relays and known suspects, and use timing analysis to figure out who is using what relay.
Tor has written about this.
Hacker News thread.
They say not given full access, so post from tor may not full picture.
In interview daniel moßbrucker say that onion v3 was affect 2 time, so not only ricochet.
Source for expert saying it fabricated?
Source for government not capable of timing attack?
Want to read up on more opinion on this.
edit: if daniel moßbrucker trustworthy. might also fabricate story.