I think they have sold some of the stolen tokens into ETH already, but still have not move the ETH yet.
The stolen ETH will be very hard to move without being traced and the hacker will be caught if we can trace their ETH address thoroughly.
Some of their tokens and ETH was frozen by the exchanges. So now they will be trying to liquidate them using the DEX sites. Anyway, it is going to be very difficult for them to convert these crypto assets to fiat cash. Converting from one cryptocurrency to another cryptocurrency is not that difficult. But that is not the case when you convert cryptocurrency to fiat cash. It is next to impossible to stay 100% anonymous.
True, but taking into account the size of the hack it is not as if they need to cash out that money now, they could just cash out small amounts until they figure out how to cash out the rest which means this is going to be a waiting game between the hackers and the authorities, the authorities will wait until the hackers make a single mistake while the hackers will wait until they can find a way to get away with this with no chance of being captured.
However taking into account the advancement of technology over time there is a chance the hackers can get away with this thanks to improvements on the technology of many coins when it comes to their privacy, so we need to learn a lesson from this and that is to never leave our coins in an exchange for long.