There is always a risk. Even the project team speaks about this in a technical document. You must remember that buying tokens you act at your own risk.