A paid security audit was conducted in February 2014, which revealed several potential vulnerabilities.
EncFS is probably safe as long as the adversary only gets one copy of the ciphertext and nothing more.