It mostly depends on your luck. Even if a project seems legit and you have researched it well, it can still turn out to be a scam, even after several months of work. I haven't mentioned any bounty campaign in 2019 that can compete with earnings in 2017.