> It looks like they got the info from the Texas exchange.
I don't think the TX in that article means an exchange based in Texas. I think TX is abbreviating the word "transaction". Every instance of TX is followed directly by a bitcoin transaction id.
https://ciphertrace.com/twitter-hack-update-blockchain-analy...
https://www.theverge.com/2021/3/16/22334421/twitter-hacker-b...