They didn't mention the exchanges used and I think there is a reason, a kind of ethics. Can't find a place where they listed the addresses, in the image it's shortened.
Yeah, those exchanges have "unwritten" rule between themselves. I saw some tweet as well from exchanges that they will immediately block the address.
Here is a good link tree view of those addresses (https://www.blockchain.com/btc/tree/444776063).
And we are sure that the hackers have above intelligence and will not deposited in an exchange. Or probably go to privacy coins like Monero.