The only thing that really makes sense short of refunding the ETH is to issue the appropriate amount of CDT to people who sent to the wrong address and simultaneously reduce the amount raised by that much (~$7M) while burning any excess over what was planned. Otherwise, unless the dev team is part of the scam, there's no way they'll be able to launch a project and/or raise funds on the new address and they're basically DOA.
There is a solution here but the dev team isn't going to like it. They basically need to develop this thing for free now, make profits, and then use those profits to refund everyone who just got scammed. Their integrity is about to come under serious scrutiny. It will be interesting to see how they operate when the chips are truly down.