yes, you are right. before investing or before joining in the bounty, you need to check and collect the information about the project so you can know if the project is good or not. but unfortunately, right now with too many ico projects list, we are difficult to find a good project because if we say project A is good to follow and join, it doesn't mean that the project is legit. sometimes the project can run away and leave their investor and their participants without paying the rewards and give the profit to the investor. so we need to be careful and always check for every project that we want to invest and join in the bounty campaign.