That's the unofficial organization. And, yeah, they definitely have some cash (recently got a $15M investment round). ;)
The official org is the Drupal Association (https://association.drupal.org). Given that they made $400K off the Chicago Drupalcon this year (after expenses) in addition to their regular association membership fees (and perhaps money from the European conf, Drupalcon London, although I'm not sure about that), there's should be money for bug bounties.
The Drupal Association was, if I understand correctly, a non-profit until recently. It has merged with DrupalCon Inc., the corporation that put on DrupalCons.
The "Drupal Association" prior to this year was an unofficial name used primarily to describe "Drupal Vzw" a Belgian non profit.
Drupalcon Inc. is a non-profit in the USA. They are both non-profits, just in different countries.
Neither has been merged/folded/acquired: much of the business undertaken by the Drupal Association moved from Europe to USA making Drupalcon Inc the main body doing business. There was a governance update to officially make Drupalcon Inc the main focus of governance/efforts to match what was coming to be in practice.
The link you included, https://association.drupal.org/node/1584, does indeed have more information but it doesn't say the things you've said in your comment.. ;)
The official org is the Drupal Association (https://association.drupal.org). Given that they made $400K off the Chicago Drupalcon this year (after expenses) in addition to their regular association membership fees (and perhaps money from the European conf, Drupalcon London, although I'm not sure about that), there's should be money for bug bounties.
The Drupal Association was, if I understand correctly, a non-profit until recently. It has merged with DrupalCon Inc., the corporation that put on DrupalCons.
https://association.drupal.org/node/1584