bounty program is still active at the moment and do I need to pass identity verification in order to get my tokens?