If you are afraid that your code will be hacked if you show it during or before ico, why don't you use escrow so someone who want to invest has some insurance. And no information about the team at all?