It is wise for people to wait patiently, and a large project like this is unlikely to refrain from paying in the end and lose its reputation easily.
I do not know anything about this Combo project, but what makes you think they actually have a reputation to protect, don't get me wrong, i'm not saying that i know for sure that they aren't going to pay bounty participants, but what i know is that bounty projects fail to pay their bounty participants more often than not. What makes Combo a large and reputable project?