https://www.securityprivacyrisk.com/how-to-evaluate-an-ico/