....
My advise to bounty hunters:
1. Don't participate in any bounty without escrowed rewards.
2. Don't be in a rush to participate in every bounty that comes up.
3. Follow only trusted Bounty Managers.
4. DYOR on any project and don't rely on BMs. Most of them don't even research a project before going into contract with project team.
Anyone else got any advice for bounty hunters, especially the noobs among them?
Your 4 points are solid. I would add that avoid KYC with unknown or new startups. Legit projects sometimes need to kyc you too so it will be hard to decide what project is for real and which are going to rug you, but all you can really do is trust your common sense. Even when you are dealing with trusted CEX, your identity could be in danger.