Whistle-blowers exposing corruption remain at serious risk, with watchdogs warning that investigations often stop at alleged hitmen while those who may have ordered the attacks remain out of reach.