How do you propose that an exchange detects 51% attacks ?
Off the top of my head:
- Watch for reorganisation messages in the debug log showing excessive (say 10+ blocks) disconnects.
- Regular audit to check that deposit transactions are still marked as valid and have sufficient confirmations.
- Watch for large negative changes in computed/reported coin supply.