Man, that's a sad story.
I have a question (forgive me, I have no experience in bounty management). Can't those guys first get the tokens into a trusted escrow before the bounty campaign begins, since they mint them from a thin air anyway?
That way there will be no stupid bending of rules by the scammers like they did.
Tagging and supporting the flag.
They can and it should be but the admin or project owner of maximum project do not do anything like these. As maximum of them have no idea about rank as well as reputation. As a result they might have no faith on the escrow service of the forum.