Why would it need to be forked? Couldn't the smart contract language just be upgraded for better security then deprecate DAPPs using the old language?
Many would argue the correct thing to do is to not fork and say that people knew the risks beforehand, etc. But that's what people said last time and they still forked, with no (apparent) severe consequences other than complaining about integrity. Two forks may be harder to justify.
It's just funny how decentralized currency is so easily swayed by a few individuals to serve their purpose.