According to blockchain analytics firm Elliptic, the anonymous FTX exploiter has used THORSwap to convert ETH to BTC, which is traceable on-chain.