It is really simple - just set the smart contract that sends ETH to everyone who sends CDT into it. When those who want to use the contract do it, you can continue the development of the project (and send CDT to people who were promised it like bounty hunters or people who sent to the hacker address). This way you are sure that there wont be any absurd because only people who already own the CDT will be able to use the contract. And do it quick because the longer you wait the worse it is for the project.