Without HTTPS (green lock), a proxy can inject JavaScript into the torrent files. This could change the Bitcoin wallet address on a file description to the hacker's wallet.

To stay safe, always: