1 in every 5 ICOs is phony, WSJ study finds