In my opinion, as an investor who encounters the theft of an exchange, it is the investor himself who suffers in the end. The exchange will not be responsible for such things and will not compensate investors for their losses.
they will refund only if its thier fault like what happen on binance before where they refunded their costumers but if its the users fault on why they lost thier coins , that wont be the responsible of the exchange . before we step in , in the exchange we already know that its risky because anytime the exchange can collapse so we shouldnt get shocked with the consequences that might happen . to the question if how they treat stolen money ? nothing . what can they do once the money is already stolen ? and they are aware with it once hacking had happen .
Hacking cant be detected out before its too late so there were no chances for it to be stopped and revert it back thats why never ever store your coins on exchange wallets for too long.This had been advised since from the beginning but people never ever learn until they do lost big time once hacks happen.Compensation would really just depend on a certain exchange and youre right we have seen this situation in time of Binance hack,
good thing that they do had that SAFU funds for such situation.
On topic, how exchange do treat up hacked or stolen money?It will vary if they would have that strict monitoring but most of the time hacked funds would be disregard yet tracing them
would be hard on the first place because no hacker is fool enough on depositing hacked funds without mixing it first.