If they indeed paid 20% of the bounty they promised, that is more than what was to be expected. Usually scams like this one pay nothing at all. Best to don't hold your breath waiting for any additional payment. I'm amazed that their main site is still online. They probably paid in advance one year of the domain and site or all of this would have long be dead and buried, like countless other scam exchanges and ICOs.