Yes there is still ICO's that are legit and still paying there workers. Most of the ICO's are still legit. But you need to be more careful in choosing your campaigns and ICO's. For me in choosing bounties and programs I choose who has high trust bounty managers. Because I think they choose that program because it's legit but it's up to you.
Indeed. We can find trusted ICOs by how they finding their bounty manager. Beside that, we can find their project in whitepapers or their team. If looks their team anonymous, better leave that ICO to minimizing our risk