You would have to hack the exchange.
Not really.
Most (if not all) exchanges do consolidate the deposits on a hot- or cold wallet.
And most often those addresses are known (or at least can be found out by depositing multiple times to an exchange).
Tracing and/or linking a depositing transaction to an exchange isn't that hard in most cases.