Pokemon cannot be hacked and legit at the same time. However they can be hacked and legal instead. Legal means it passes all possible hack checks and is not recognized as a hack by the games, Pokecheck, etc. However, legit means it was actually caught or obtained in game without the help of an Action Replay or an editing program. So legal or not, they are still hacks and cannot be traded here on PokeCommunity.