As Nomad Bridge depegged assets, the one who sell its R tokens to someone else sold its whole claim to him on the recovery and compensation plan. Regardless the condition of the transaction was OTC, on a liquidity pool like Balancer or a direct swap.
Nevertheless, Raft can still do a snapshot in the future to exclude the wallet tokens of the hackers, and still take into account the people who bought R tokens for various purposes ( Raft believer, arbitragers, errors…).