I meant after the hack is done, how do we track where the stolen coins go? Is there a standard way to know "this address has funds that were stolen on mm/yyyy?
Just knowing where the particular UTXO was spent or if the address was publicly posted as "
his", nothing else.
I would be a game of
cat and mouse.
For the hacker, he can just send the coins to a
mixer or ConJoin to reduce the chance of being traced.
For the authorities (
not Bitcoin developers), they use specialized software and tools to check if addresses belong to the same wallet or other techniques like
Dust attack to accomplish it.
If you ask me, the hacker has the advantage on this game, but that depends on his wit.