Actually we are lack of skills and information about programming and computers skills. We don't even know at what extend the DDOS protection suppose to be able to protect one site/server. Or maybe how strong hacking scripts can hack one
hyip site or server. So, every
hyip admin can simply saying that their site was attack or hack by DDOS or hackers.
If we know hacking skills, we can ourself confirm that the site is safe or not by try to hack the site (hackers got 2 categories. good and bad hackers

).
I don't even know what DDOS all about, then how do I confirm that one site still unsafe even they use DDOS protection?