The only thing that really makes sense short of refunding the ETH is to issue the appropriate amount of CDT to people who sent to the wrong address and simultaneously reduce the amount raised by that much (~$7M) while burning any excess over what was planned. Otherwise, unless the dev team is part of the scam, there's no way they'll be able to launch a project and/or raise funds on the new address and they're basically DOA.