If the Pokemon is in an event distribution ball (which according the picture, this one is), then it is not hacked. If this Pokemon was transfered to X/Y through Pokemon bank, which I'm assuming it was, then that also means it's not hacked. Pokemon Bank has the ability to tell if a Pokemon is hacked or not; if it is hacked, the user is denied the ability to transfer the Pokemon. My sister found that out the hard way.
Wonder trade is random, you never know what you're getting until you send off your pokemon. Most time I wonder trade I get low IV pokemon, or foreign pokemon.
Well I was traded it, so I assume it's trade able. If not, I'll refund the credits, and let them choose one of the other shinies I have for putting them through the trouble.