1. Change the admin folder a strong name and do not share it with other.
2. change your db prefix name with other, do not use ps_
than your 99 percent of hack will prevent. if there is any security hack from prestashop controller in that case site will hack other wise it is not possible.