It has only been around for 6 months, give it time. If a hacker wants to attack a coin are they going to try to tackle a coin with military grade security (EXO) or noob grade security (Nxt).

It WILL happen. It is just a matter of when.