It's common for ATMs to be built on XP, there's no denying that. But the reason is because they were built on it initially, when it was still okay to do so. To using Windows XP for the base of an ATM (especially one that -- by design -- must be connected to the Internet) in 2014 is more than irresponsible. I can't imagine the kind of cargo cult thinking required to make that decision.
I am pretty sure that manufacturer of ATM used XP as a base and Robocoin did not really have a choice. They could have chosen different ATM company, but it's not like manufactures are fallen over themselves to sell 70 ATM machines to new start up.