Isn't this basically what happened with the infamous DAO hack that spawned ethereum classic?  Bad contract code?  It does not surprise that it is still going on, all these ERC20 ico, airdrops, and bounties ... It seems like people are rushing to get their ideas out there and perhaps not paying attention to detail.