FYI:
http://kodu.ut.ee/~arnis/torchat_thesis.pdf
Abstract
TorChat is a peer-to-peer instant messenger built on top of the Tor
network that not only provides authentication and end-to-end
encryption, but also allows the communication parties to stay
anonymous. In addition, it prevents third parties from even learning
that communication is taking place.
The aim of this thesis is to document the protocol used by TorChat and
to analyze the security of TorChat and its reference implementation.
The work shows that although the design of TorChat is sound, its
implementation has several flaws, which make TorChat users vulnerable
to impersonation, communication confirmation and denial-of-service
attacks.
P.S. Fix not available. The author of TorChat, lacks the resources to
fix the flaws.