Most bounty programs are aware of this. Many projects have closed their bounty program in response to that type of attack.