> what fraction of it was stolen

This is the rub. If you’re using mcap and mark-to-market rates for total value stolen, it’s completely reasonable to use the same rate to evaluate the size of the system.