as I understand it, they can figure out the addresses... but who can't?
all transactions are available on the blockchain,
if you ever used ChipMixer you can figure it out yourself too
but you will only know the deposit addresses and the output addresses (chip sizes)
We attempted to match the input and output addresses of Chipmixer to detect further movement of the stolen funds. We assumed the hacker would periodically need to merge segregated funds from the mixer to effectively control them.
Do you really think ChipMixer coins will be properly mixed after this?
well, don't blame the mixer! it's the hacker who stupid enough to merge the mixed outputs
ChipMixer has done its job, but merging the outputs with no additional techniques is just plain stupid
there is no apparent connection between the ins and outs, they are fully disconnected
and as long as the user maintains certain techniques using his coins, it will stay disconnected