Press release

22 Jan 2018 London, GB

Big risks in ICO market: flawed token valuations, unclear regulations, heightened hacker attention and congested networks

A lack of fundamental valuation and the due diligence process by potential investors is leading to extreme volatility of the initial coin offering (ICO) market, according to new research published by EY.

  • “Fear of Missing Out” (FOMO) drives token valuations without any connection to market fundamentals
  • Investor demand for initial coin offering (ICO) projects remains high, but the ability to reach fundraising goals has been declining since mid-2017; down to 25% of projects in November from 90% in June
  • Speed and size of market draw hackers’ attention with 10% of ICO funds lost or stolen

A lack of fundamental valuation and the due diligence process by potential investors is leading to extreme volatility of the initial coin offering (ICO) market, according to new research published by EY. The research (pdf) also found that in some cases ICO investors are contributing capital at an average rate of over US$300,000 per second.

The EY research, which studied 372 ICOs around the world, also found that the offerings raised US$3.7b1 in funds, twice the volume of VC investments in blockchain projects. Furthermore, the US is leading the race with the highest volume of ICOs originating from the country (over US$1b). Russia and China follow, with each over US$300m.

Paul Brody, EY Global Innovation Blockchain Leader, says:

“As ICOs continue to gain popularity and leading players emerge globally, there is a risk of having the market swamped with quantity over quality of investments. These high-risk investments and the complexity of ICOs need to be managed to ensure their credibility as a means of raising capital for companies, entrepreneurs and investors alike.”

Utility tokens

One of the key findings from the EY research is that there may be no business need for many of the utility tokens being offered. Utility tokens are essentially a form of application-specific currency that blend the technology features of blockchains with a speculative component for investors where the tokens’ value will rise as usage increases.

In most cases, however, there is no need for an application-specific exchange token. Indeed, for companies that record their revenues and expenses in dollars or euros, settling intercompany liabilities with a volatile specialized currency adds complexity and risk without significant benefits. The core technologies and benefits of blockchain technologies can be applied to business operations without having to use proprietary digital currencies.

Valuations based on FOMO

Unlike initial public offerings (IPO) in the stock market, ICOs are sold into the market before a business around the solution exists. While some very promising companies have managed to IPO prior to having profits, they almost always have revenues and customers on which it is possible to build valuation models.

The typical ICO has no customers, no revenue and in most cases, no working product. Often the only foundation for the ICO is a white paper that describes the planned technology and a small piece of software that governs how the tokens are issued and managed. Valuations based solely on a white paper are always going to be risky and extremely speculative.

Congested networks

The research also analyzed more than 110 ICOs that have raised 87% of all funds so far. More than 70% were on the Ethereum platform, a public blockchain. It is not only the main platform for ICO, it also hosts a myriad of other distributed applications including the popular Cyrptokitties marketplace.

The result has been network congestion as traders and business operations compete for limited transaction slots. In the long-run, the Ethereum road map builds out a greater capacity for trading and transactions, according to the EY research. In the near-term, network congestion could pose an additional risk to investors.

Security and regulation

Investors face two other significant risks the research finds. The first is regulatory: different countries have varying levels of regulatory strictness for ICOs, leaving vulnerabilities in the market. As a result, those looking to conduct illegal activity with an offering could move to jurisdictions where regulators take a light touch approach toward ICOs.

The second risk is theft from hacking: more than 10% of ICO funds are lost or stolen in hacker attacks (almost US$400m). Hackers benefit from the hype, irreversibility of blockchain-based transactions and basic coding errors that, had the ICO been carefully reviewed by experienced developers and cybersecurity analysts, could have been avoided.

Funds are misappropriated via substituting project wallet addresses (phishing, site hacking), accessing private keys and stealing funds from wallets, or hacking stock exchanges and wallets; all on top of indirect losses caused by high reputational risks for project founders.

Greg Cudahy, EY Global Technology, Media & Entertainment and Telecommunications Leader, says:

“It’s clear that blockchain is already having an impact on many business topics beyond cybercurrency. However, the debate remains with currency usage itself, which began with the rise of blockchain in the first place. Once new standards are in place that are accepted by all participants—allowing for improved transparency, fraud prevention, and legitimacy — the protection of investors and users alike has a greater chance of success.”

- Ends -

About EY

EY is a global leader in assurance, tax, transaction and advisory services. The insights and quality services we deliver help build trust and confidence in the capital markets and in economies the world over. We develop outstanding leaders who team to deliver on our promises to all of our stakeholders. In so doing, we play a critical role in building a better working world for our people, for our clients and for our communities.

EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients. For more information about our organization, please visit ey.com.

This news release has been issued by EYGM Limited, a member of the global EY organization that also does not provide any services to clients.

About the survey

The survey collected data on 372 global projects that have conducted ICOs and performed a detailed analysis of the top 110 projects that collected 87% of all ICO proceeds. As the ICO market is unregulated, there is no single source of ICO data. Data collected was based on public data sources across exchanges, ICO reports and trackers, data aggregators, news sites, blockchain network scanners/platforms, dedicated blockchain social media and interviews. Conclusions were verified against other public studies. The research was conducted in conjunction with Group-IB, a cybersecurity solutions provider.

1 The figures on ICO funding volumes (total and per projects) are derived from open sources as of December 2017. We did not audit or confirm the data. Due to high volatility, the data at the time of publication and use may be subject to significant change.