Some on this board claim the hacker sold and bought a large amount of coins at 0.01 to be able to withdraw 1000$ worth of coins at 0.01.
Based on the interview last night, I think MtGox claimed that the $1000 worth of bitcoins was based on them being in the neighborhood of $5-$10 each, rather than $0.01 each.
I don't much care for the explanation given about the 'auditor' being hacked. They're citing privacy reasons for not giving out the name of the auditor, when in fact it is ridiculous to have any audit performed by unnamed entities. It's the name of the auditor, and their credibility therefrom, which gives credence to the audits they perform. Not naming the auditor is extremely suspicious, in my opinion.
When asked why the auditor needed access to the live database, it was claimed that the audit being performed was to ensure that MtGox wasn't manipulating quoted prices to their own benefit. That's all great, but only if the auditor is legitimate. And we have no way of knowing that the auditor is legitimate if we don't know who the auditor is.
What use is an audit performed by unnamed entities? It's worthless!