Heh, over 14 years ago I gave a talk at LA2600 about taking over ~10% of TOR exit nodes for at the time only about $2/hour using AWS dynamic SPOT instances. Glad to know there are protections against this or at least a way to report bad exit nodes now. :)