Most of the time, during public Bug bounty contests, the project has not only been deployed already but also audited once or more times.