Both Hitbtc and Yobit can be hacked, if you are careless with your 2FA. But in my opinion Yobit is far worse, because the support is almost non-existent. English language support tickets takes ages to get resolved. If you know Russian, then you may be a bit lucky.