Hackers at their peak operated about a quarter of "exit relays" on Tor this year, allowing them to redirect Bitcoin transactions.