That 18k BTC wallet could also be Bitstamp moving coins around or to safety, where's the proof those coins are in the hands of the supposed hacker?
timestamps of the transactions match perfectly with the attack
huge and non standard miner fees
That's not proof. Stamp could have set high fees also to move those coins as quickly as possible after they discovered the breach.