Blockchain security experts uncover two popular scam projects with millions laundered