Maybe it is legit if the project is a promising project,I participated in airdrops also I did not yet encountered bug reward,I only got 1.5$ the last time I check.