Their smart contracts has been audited by world top contract checker Certik and also Certik is the one who first aware of this exploit and tweeted about this in twitter. One contract exploit leads to all other. the hacker was smart enough to break security and got access to these contract despite of high security.
Not only Certik but there Contract has been checked many times by 2 another big anti hack companies including peckshield team,Blocksec and Quantstump. 100 Eth has been recovered by BlockSec and other 200 Eth by other company. This was an approval bug and Hackers took advantage of it and success to break security. Security companies identify these bug very fast and Dex was lucky And was saved from great loss and recovery some Eth earlier. If their contract not audit by big companies there was chances if big loss.