He already made his money when he shorted ETH before the hack.

Also, the hacker clearly isn't benevolent, because he chose to be blackhat instead of whitehat (he could have executed the attack and then announced how he would return the funds when the DAO was dissolved).