It seems to me that in the current realities of ICO projects they simply need to have audit reports. If they are not there, then the probability is high that the project is a scam and, most likely, will simply steal investor's money.