must be a joke..
a joke of 22,000 USD ?
hacker moving those for fun or stealing more?
Hardly stealing more. It's probably the same coins, being thrown around.
I don't think Bitstamp would leave their hot wallet automation on after the hack.
What automation?
Bitstamp has a hot wallet and it gets compromised: that just means that the hacker gets full control of those addresses. There is no way for Bitstamp to "disable" them, the best they can do is to tell people to stop sending coins to those addresses because a hacer has the private keys.
If a Bitstamp customer is not aware of the current situation and just sends BTC to an old deposit address he has in his address book there's nothing Bitstamo could do. Money would go to the hacker, especially if he is faster that Bitstamp and uses huge transactions fees to beat any double spending attempt by Bitstamp.