The project bounty manager should have at least checked the background of the campaign first. Isn't downpayment for the bounty manager possible? That should make the scam project move away from the bounty manager.
I guess even the manager was getting fooled by the scammers. It's not only it and I have seen that so many times the defi bounties ended as scam project and I wanna say that if the total scam bounties created by the defi projects are much greater compared with the ico bounty.
The defi platform was coming from forking the existing platform and that makes the scammer can clone the defi site anytime.