Found the Wasabi "attack":

"to be precise: changes the # of inputs to 2 (yep), drops the coinjoin time from 45 min to 5 min, and raises the fee % to milk you" [1]

Doesn't sound like much of an attack to me but a malicious coordinator playing with parameters in a legal range that are free to control and clients just accepting whatever the coordinator says.

[1] https://bitcointalk.org/index.php?topic=5499439.0#msg64308723