Monero Project admits thieves stole 6-figure sum from a wallet in mystery breach
(www.theregister.com)
I would not use CEX under any circumstances - they require submitting ID, and I would not trust a random company to keep such data safe. But yea, discovery of sellers is a problem. Was going to go with a Localmonero one before finding someone IRL who sells for cash.