Check their team members, if bounty program is run by good people you feel safe. I suggest needmoney and Tokensuite team's projects. They are fairly new in this business but they try to do their best. I join their campaign lately, they fix problems eventually.