Here's my math:

CL/inputs lost 4.1k XBT's in the attack.
He covered 900 XBT's to pay out to inputs.io users from his own pocket.
DumbFruit the got settled with 200, making a 755 XBT loss.
That alone adds up to 900+755=1,655XBT, a little less than half than the value lost in the attack that has been covered by DumbFruit and TF alone.

A guesstimate from me is that ~1k more of the losses was covered by various inputs.io/CL users making deals and getting partial refunds.
4.1k - 2.6k = 1.5k losses that still remains to be covered by TF or his depositors.

Then of course, we have the matter of any defaulted loans and owned securities that cannot be traded due to close down of BF.