Seems like a generic extend and scam scheme project to me. I have seen several projects like this. Extending their campaign for several times and at the end, they just don't pay their participants. If they do they implement kyc just to narrow down participants that will receive the token and worst the spreadsheet is just left as it is. Meaning without any token allocation and leave the participants unpaid.
Just to make sure, care to verify if the bounty manager holds the allocated token for the campaign? If he does then, rest assured that you (participants) will be paid (that is if the bounty manager decided not to run away with the token) if not then... I hope the project doesn't screw you all bounty participants.
Yes I agree there is a possibility that those running this project are those who runs similar campaigns in the past let's look on the similarity:
They change the rules very often like extending bounty rewards from 2 weeks then 4 weeks then 5 weeks and if you leave you lose your stakes
They ask no KYC after the bounty they change it to KYC type of bounty using the old alibi of account cheating
They locked the token because they fear of bounty bounty hunters might dump their token.
And the worst of all not giving your token and dev run away with investor's funds
Check out all those bounty campaign that did this and they all have the same ending
Been there seen this.