Refund those on the whitelist who do not want the tokens.  Burn half of the tokens from the refunds.  Use the other half as bonuses for everyone who participated in the ICO, both the real and fake address.  Build your empire, earn your keep.  Get this situation resolved asap and move on to developing.