I kind of guessed this would end up like this, and I think this outcome is better than the intended. I don't think you did enough to inform users that you would wipe out their tokens.