Yes, after such an incident, it's hard not to call such a project as PRL SCAM. There is no forgiveness for this team, because thousands of people invested in the project and lost money. They must be held criminally liable and reimburse all those who have suffered.
At this point in time, the question is no longer about forgiveness, but the incompetence of any member of their team to demonstrate any knowledge of just how damaging this vulnerability is, considering the fact that they were working with a faceless CEO.
It also shows that smart contract and disintermediation is just hype because someone will always own the key to unlock it all. The blockchain is just as centralized as the centralization we like throwing stones at