projects like REMME for instance have asked partners like hacken to pentest their own website and find security holes before they started their ICO. this proved to be a good decision and they even reached the hardcap. i suggest that bitfence should ask independent companies or even the whitehat hackers community (like hacken.io) to do some test attacks just to be sure their system works and survives any hacking attempts.
You have a pretty solid point on that, hackers are skilled individuals, even though they have done more harm than good but checkmating them is of necessity and it won't be an easy ride, this project is like an open challenge to them and they will do what is needed to break the security of bitfence, then brag about it, that's why the project team should be on alert and proactive