Bybit hackers have exchanged stETH and other ETH derivatives on the chain for ETH, so it can be considered a hacking incident rather than a simple exchange swapping hot wallets. One of the hacker addresses (currently holding 1 billion u worth of ETH): 0x47666Fab8bd0Ac7003bce3f5C3585383F09486E2