They are working on a soft fork atm. the leaked ether is in a child DAO so the attacker has to wait another 27 days before he can withdraw. At a later time a hard fork will be proposed.