Such a severe bug could easily destroy the coin, if it not already did so.
if the dev know a little about logic, they will realize that the hacker has stolen from them not from the community so in my opinion the should destroy 370 000 XZC send them to a vanity wallet a wallet without private key. that will bring a little confiance in the dev.