> Once hacker gets your money out of the hacked contract, no hard fork is feasible.
Why wouldn't it be feasible? Have all users update to a version of the client which artificially corrects for the balances of the hacked wallets. Isn't anything possible with a hard fork?