One of the reasons is because they don't employ people who very good in cyber security. But the thing is that any exchange can be hacked, but insiders are usually aware.I know but what does it really take for smaller exchanges to upgrade their security system to be more secured ? as I understand most of this smaller cryptocurrency exchanges can easily be hacked and they will go on 2 or 3 days shutdown to recover their data.