Look at the whitepaper of the ICO and the team. Look at the bounty regulations and make sure you can communicate with the bounty manager. If these check out, you have a good chance that the bounty program is good