hi
i checked about 20 spreadsheets of bounty campaigns. and in these lists i found about 15 private keys to ETH addresses.
people post their key instead of their address.
all the addresses had nothing in it. maybe somebody else already emptied them.
That is foolishness, if someone can no differentiate at this stage the difference between wallet address and Private keys. 15 private keys is a huge number