Why do some projects require KYC for bounty? Is this a legal thing or is it a way to make sure they are not being scammed by bounty huntrs? Are there jurisdictions which would require bounty to have KYC? This is not a token sale after all.
Most likely KYC in bounty campaigns is organized in order to stop the mass participation of multi-accounts. I do not know if this is so and how effective it is, however this is the only assumption that comes to my mind.
I try not to participate in bounty campaigns where there is a KYC, I just do not want my data to flow into the network.