In my understanding the attack vector was anticipated for the executeProposal() function, but the attacker is using a recursive call of the splitDAO() function.

This blog post[1] from the Ethereum Team describes the possible attack.

[1]https://blog.ethereum.org/2016/06/10/smart-contract-security...