[tor-talk] What happens when an .onion site is compromised?

[jiggytwiggy at danwin1210.me]

Imagine that an .onion site is compromised. This could be by the owner who
wishes to expose visitors or by the police who want to target the
clientele.

(I remember, in the later case, reading something on Deep Dot Web about
when the FBI took over a CP site and installed malware).

The goal is to acquire users' real IP addresses.

What would happen to a visitor if they visited a booby trapped .onion
site? The visitor would be using the current version of TBB. How would it
be possible for a visitor to be in danger?