Hackers have stolen $400 million worth of ICO investments