That's why it's good to have a working open source project, that way the public can audit the code. A lot of ICOs don't release the source until much later though.