An additional $25.6m has been exploited from Stake.com, bringing the total to $41m so far