Yes, the hacker could have stolen XCR if the distro had gone on in time, but fortunately, XCR is so new that resetting the genesis block and blockchain would have been easy.  And since there is no other place to trade or spend XCR than Bter, the hacker would have been up the creek without a paddle.

He did not have access to a XCR wallet.

BTW, the NXT boards have identified the hacker.  They posted his info and then pulled it.  Maybe thats where the Bter dev is headed on his 12 hour flight?