Initial coin offerings are red-hot, but they fall into a scary regulatory gray area.