For me, the most acute question is how to remove projects from the bounty scam list, because in this case, even if you do an escrow, then what to do next with these tokens, the project is dead. I can give you an example from a recent one - the ApolloX project, everything went fine and the project itself seemed serious, but in the end, the team was gone, no news and updates for more than a month.
the case of cases like this often happens, maybe at first they were serious and actually not scam, except that they had problems that they could not handle technically such as a hacker attack or sales could not reach the target.