Stupidly high soft/hard caps
Issuing massive amount of bounty rewards which devalues it for the next couple of months due to dumps
Poor communications from team prior or immediately afterwards
ICOs that don't take security serious and end up getting hacked or leaking private data like email addresses
Meme based ICOs
This is a good list, I would add pre-mine and pre-ico distributions.