I've found a malicious txn from RETN contract creators directly to Forkdelta (Etherdelta_2) 2M supply in total with 3txn.

1. https://etherscan.io/tx/0x159197d67f7d1d9de70c4bbf9ccc742ada6246907af8ae4110f22233781df634
2. 0x028b6422009b5d905cecbade92fbca5f2699645fac3fce58731f0b24d5c21f6b
3. https://etherscan.io/tx/0x0c0d2d3fd354dc6f6a20ed3c4e5fe65013036415b4c9f935edee8d9767b8c6c5

They are dumping their own tokens and already gained 25 ETH form Fdelta

https://preview.ibb.co/hcsjUx/Screenshot_2018_04_08_21_34_18_794_com_android_chrome.jpg

https://preview.ibb.co/cvzEUx/Screenshot_2018_04_09_08_44_13_167_com_android_chrome.jpg

https://preview.ibb.co/mNHCGc/Screenshot_2018_04_09_16_45_40_359_com_android_chrome.jpg

https://preview.ibb.co/iB5zwc/Screenshot_2018_04_09_16_49_36_925_com_android_chrome.jpg

Is it normally done by ICO Creator?