Jerome Etienne, author of Yavipin, has done a security analysis of tinc. You can read his findings in our mailing list archive or on his homepage. His points are valid, although the higher protocols will protect you against most of the weaknesses. We will further increase tinc’s security in the upcoming release.