Do you bounty hunters get paid in ETH or do you receive the ICO token (which is erc20 in most cases)?
Suppose you receive it in their own token, I assume you cannot do anything with them until they get listed on an exchange, correct?
Yes, you may right. You have to read their white paper before attend the bounty. Only white paper can give you a clear concept about their project.