I see a lot of projects asking for kyc when it is finished bounty not say it at the beginning of the bounty, and auditing Kyc by themselves rather than by a professional auditing agency,and there is no guarantee of security in data privacy.
plus the bounty manager who has the motto "at least the bounty manager gets paid" 
perfect, isn't it ??

we must unite and fight this..