Binance have managed to freeze some of it. I presume the hacker knows a thing or two so may be able to move faster than certain exchanges. I always find it weird how rapidly they run towards an exchange when it's still super hot.
because it will only get worse if they sit on them (and fast). every hour that goes by, the more likely hacked coins are to be marked as tainted by blockchain analytics companies and exchanges. at that point, they're basically worthless. either they launder funds quickly through exchanges and recover some fungible money they can actually liquidate, or they're stuck holding untouchable coins.