actually only requires escrow, no need to pay a sum of funds, it's just that escrow isn't as easy as imagined because I'm sure many bounties won't do this because it's a bit troublesome and it seems like our way to avoid scams is to do our own research and choose a person bounty manager who can be trusted and not carelessly in taking a project that wants to run a bounty with their services.