If the hacker could send to that address they could send to one they controlled. I rate your theory as doubtful.
Now using it further from there might indeed be problematic... but also a champaign problem.
The risk to them comes when they try to spend the funds later. They'd always have the option of dumping them on something unconnected to them for bragging rights with relatively low marginal risk.