The point I made to Niels (the police guy) was that DPR had way too much confidence in the technologies he was using to keep him safe.
He wasn't caught because of a vulnerability in Tor or any other software but because he gave away way too much information on social networking sites and message boards (including this forum). If he had been really cautious and never used any of them he might have not been caught for a long time.