Over $400 mln of ICO funds has been lost or stolen over the past two years - according to an Ernst and Young report