Found the Wasabi "attack":

"to be precise: changes the # of inputs to 2 (yep), drops the coinjoin time from 45 min to 5 min, and raises the fee % to milk you" [1]

Doesn't sound like much of an attack to me but a malicious coordinator playing with parameters in a legal range that are free to control and clients just accepting whatever the coordinator says.