There are just 2 realististic possibilities:

1. Mark Karpeles stole it
2. Somebody else from MtGox stole it.

The whole "there was a hacker, who used a bug to steal the Money"-Argument is just stupid.