I would tend to agree that bounty hunting is no longer profitable this year. I guess this is due to the bearish alt market. But there are still a lot of companies who you just describe. They still bounty hunters to promote their site through air drops.
But in the end, it's either they ask for your private key to be able to deposit (allegedly) but this is obvious a scam or just ask some gas, which I think doesn't make sense to me. Why would a project ask it's hunter a gas just to be able to deposit your reward?