Looks like it is calculated here (I can't post a link). My guess would be that API only returns public validators, so there are very large accounts missing?
You said it wasn't correct as hard fork wasn't implemented?