Firstly, you must do your own research and don't trust anyone's recommendation. Check the project for it's usecases, the credibility of the devs and team member. Don't participate because of FOMO. Also don't expect to much from bounty campaigns, it's a gamble so you won't be disappointed