I think the only legit bounties are the projects that launch thier private sale on good exchanges like binance and bittrex but the problem is some IEO on exchanges don not run a bounty campaign.