Yes, they've been hacked in the past; maybe more than once or twice.

But most problems with crypto currency exchanges come down to "how secure is your password&the computer you use to access the services". Typical hack looks like "someone logged in and sent my btc to *address*". No, keeping funds in usd will not help either. For some reason exchanges don't implement additional auth for money transfers which could partially help in such situations