I should note that relay selection is weighted by bandwidth, so the attacker would have to control 1/10 of the entry and exit bandwidth, in the example above, not just 1/10 of the relays.