I don't know what measure will be taken, but one thing I'm sure: the measures to be taken should be general and not segmented between whtelisters and general investors.
Actually whitelisters and general public invested in different circumstances and got different outcomes so obviously they will be treated differently. Whitelisted people can easily recover their ETH and that is a must. Regular users got scammed badly but I can not Imagine why they sent ETH to the address without even checking if it is a contract on etherscan so this is kind of their fault too. Yes it was on official site. But so were the fake addresses on slac sent by slackbot which is an official channel and some people fell for this and some were smart enough to check.
To be fair to those who sent to the fake address. It was published on the official site and they didn't want to miss out on the ICO since many have sold out in minutes.
A solution that might still save this project is to offer 2 options for investors.
1. Offer refunds for those on the whitelist first and if there are remaining ETHs left, offer those who sent to the fake address.
2. Increase the amount of CDT for all those who want to keep their investments. Use the tokens that were refunded and give those who still
want to support the project an additional bonus.
The team may end up with zero ETHs from this and more CDTs, but if they truly believe in their own project and work hard for it's success, those additional CDT's will pay off. Look at projects like Stratis for example. Turned pennies into dollars.