One of Bullrun's problems is that it appeals to scammers. The scary thing is that the scammers also become more professional, they accumulate experience from old projects and learn from each other to scam crypto community.
Hunters are victims too, sadly I'm an unlucky hunter too.
For large projects that deliberately evade the obligation to distribute rewards after a successful bounty campaign, the Bounty Manager community can conduct a round of reports to attack those projects. For example, BountyDetective can run a bounty campaign for community to attack and report StudentCoin.
With scam projects, I think Bounty Manager should escrow a certain amount of assets such as ETH, ADA, TRX, BNB or USDT before accepting to support that project. In case the project fulfills the commitment, the escrow money will be returned, if not, the asset will be distributed to hunters community.