Madrid-based payment app and card issuer 2gether said it can only reimburse investors with its native tokens following Friday’s hack.