Exchanges need to improve on their security in order to be able to stop hackers.Hackers are working hard to improve on them self,so also the exchanges need to improve on security.
There is this trend going on these days that the hackers are hired by the companies and are paid in millions because they hack their websites, finds flaws in it and then the company improve and get rid of those bugs so this is another legal way to make money.