In the wake of the attack, Pump.fun’s largest tokens have recovered. But some affected tokens remain in limbo.