why should the project have any weak points in first place?
besides, it depends on what the "project" is. is it a business like an exchange,... (since you mentioned paying a lot of money for it) or is it just an open source cryptocurrency (in which case paying money doesn't make any sense!).
if it is a business then attacking it, exploiting the flaws is dishonest and it may even be pursued legally.
but if it is a cryptocurrency then most of the "attacks" that i see are usually using the features of the coin because it was poorly designed and leads to catastrophe. in any case attacking it won't help with any kind of "overtaking"!
You talk like this isn 't a weak project at all .
Right now , the greatest projects in the world have weaknesses.
sometimes you try to beat him.
sometimes you try to remind him of the failure
but you know what the consequences of your impact are
it depends on you.