Yes, the problem has always existed，exposing email address does lead to a lot of spam，for a experienced bounty manager，usually dont make this mistake，but if a bounty project is operating by a newbie，it is hard to say. Generally，this problems can only be solved by ourselves, that is creating a new one to join bounty project.