Sounds like Hacker Dojo was not following the rules already in place to prevent this sort of abuse.
1. Is the non-profit in Deleware? So many shady non-profits set up shop in Deleware. When you read the requirements you will see exactly why. I've gotten to the point, I will only listen to CA non-profits when it comes to donating. California has some stringent requirements.
2. Yes--they have rules, and procedures, but there's a lot of people who don't follow the rules. The rules are getting harder to get around, but so many non-profits are there for one reason. The reason--provide a job, and a good wage to the founders. The Obama administration enacted rules that make non-profits more transparent though.
3. I have watched a few non-profit founders make, usually a husband and wife, very rich. I could go on at lenght, but tired, and it seems like no one really cares.
4. When ever I get someone asking for money for their little non-profit, I go to, forget the name--Guidestar. I download the free preview. I go to the bottom of all the pages, and look at their 1040's. I then look for the one, or two people making a lot of money. There's always one, or two individuals. I get so discouraged, and wonder if anyone in these nonprofits really cares about what they proclaim.
When someone embezzles $30k, they don't do it in one transaction. That would be far too obvious. If you space it out over a year, one could make it fairly invisible.
The other issue is these charges (apparently) weren't invisible/low key transactions. If someone can literally thumb through recent statements and immediately identify suspicious activity like Gym memberships and Vegas trips then that's an obvious problem.
It's one thing if $30k was missing and the company was generating $30 million in cash flow but Hacker Dojo only has $300k in the bank and I have a hard time believing embezzling $30k could be as easily hidden in small transactions if proper controls were in place.