My first question is... Why 92M?

The hacker didn't play it smart, it makes it just to prove there was a flaw and not with the intention of making money, because another way he could manage a low profile creating coins 1 by 1, that way will be harder for the users to realize there was a bug.

Thanks to Satoshi for fixing this issue ^_^