In order to Propose his malicious Proposal 21, the attacker had to lock some TORN (Ethereum Transaction Hash (Txhash) Details | Etherscan), since he had not TORN at that point. Now, all he did was unlock it (Ethereum Transaction Hash (Txhash) Details | Etherscan).