Whitelisters will not receive a refund. I'm not sure why that's being mentioned. They paid for a token and they're going to get it. This hack does not affect them. CoinDash is even going as far as giving those who were scammed their tokens since it was their fault for having lax security on their website.
The only issue is that now the tokens will be devalued due to lack of faith in the project/developer, but to be fair there was never a promise of value in the tokens/ICO. You're buying on speculation that they'll be worth something and because you want to fund the project. If they turn out to be worthless, then you lost on that speculation.
If devaluing a token is wrong then Bancor was also wrong to keep selling over their promised limit (increasing their market cap and ruining good-faith with participants in the ICO). If anything this hack would normally increase the value of CDT because the market cap will be around 6m rather than the originally planned 12m (meaning more room for profit for investors).
Once again the real issue is CoinDash earning our trust again somehow. If people have no faith in the project/devs then the tokens will become worthless. This is coming from someone who is $30,000 deep in this mess. I obviously want CoinDash to recover so I don't end up losing my investment. They have a LONG way to go to earn our respect/trust again though...
The whitelist should receive a refund if they wished due to the incompetence of the team. For someone who dumped 30k into this, you sure don't know much about numbers. You're saying the marketcap is 6million now instead of 12million so the CDT are worth more now? That is false. Your 30k is now worth 15k if the marketcap is cut in half. The number of CDT are fixed at 1 billion. So if marketcap goes down, each CDT goes down.