The only thing that really makes sense short of refunding the ETH is to issue the appropriate amount of CDT to people who sent to the wrong address and simultaneously reduce the amount raised by that much (~$7M) while burning any excess over what was planned. Otherwise, unless the dev team is part of the scam, there's no way they'll be able to launch a project and/or raise funds on the new address and they're basically DOA.
There is a solution here but the dev team isn't going to like it. They basically need to develop this thing for free now, make profits, and then use those profits to refund everyone who just got scammed. Their integrity is about to come under serious scrutiny. It will be interesting to see how they operate when the chips are truly down.
Agreed, it's also a bit of a stupid inside job if it is one. Judging by the initial rush, they could've raised well over 12M, strung people along for a year and then released something shitty rather than pull this shit and be liable for criminal charges. That's the only thing making me think this wasn't an inside job.
Either way, didn't lose too much ETH but annoying as the project is one of the few that looks promising and despite the previous shenanigans linked to earlier, they seemed to have a great team and decent advisors.