I pulled data from DefiLlama for each major Smart Contract Auditor. Protocols they audited, and the percent of those that were exploited. Below is the ordered list.
Note: not all protocols or audits are on DefiLlama. And some auditors may work on more risky/complex projects.