hi
i checked about 20 spreadsheets of bounty campaigns. and in these lists i found about 15 private keys to ETH addresses.
people post their key instead of their address.
all the addresses had nothing in it. maybe somebody else already emptied them.
Those who unintentionally put private keys to their eth address has surely lose all the ethereum in their wallet. They are ignorantly putting it and somebody has taken advantage to take all their eth. They deserve it since they are the one responsible for their action and not anybody else.