How can a merchant or even a crypto exchange know that the Bitcoins they receive weren't stolen in a hack before being laundered through a number of wallets ?

I assume the US government will ask Coinbase to freeze these assets. But that is not DeFi.