If an exchange got compromised there's no way you would know you're sending to the attackers address