I don't even think the solution is that complicated.  In fact it is super easy:

 - Severe penalties for cheaters and actual enforcement.

 - Triplicate paper forms with random tamper-proof identifiers.

 - At least two adversarial counting groups (usually dems, repubs.)

 - Counts must match.  If not, the orig held by the voter can be called to see who the cheater is.

The real problem at this point are the computer based tabulations.  It was these databases which were the target for the hackers, or more simply, the cheaters.  It is understood at this point that the mainstream media can put out results make of whole cloth and nobody will question it.  If they do do a re-count the cheaters will be protected (e.g., 2016 Detroit) since actually prosecuting people would threaten the perception of America as a democracy in the minds of the sheep and thus create a 'threat to national security.'