The amount taken depends on the severity in the attack and the amount of validators that participated in it. for a node operator you will need to run a server 24/seven carrying out evidence of stake validator obligations. Use our intelligent Node Stack to manage your node + validators in the protoc