Do you really have to guess? The latest Bloomberg Businessweek documents the costs for taxpayers of fixing Obamacare’s chief website.

The U.S. government paid the main healthcare.gov contractor $4 million to correct defects of the botched site and withheld only $267,420 of what it owed the company, according to a new federal audit.

The report on the Centers for Medicare and Medicaid Services (CMS) and its contract with CGI Federal is … the latest in a series of audits critical of federal oversight of the private companies that built the insurance marketplace at the heart of Obamacare. Although CMS replaced the contractor a few months after healthcare.gov’s meltdown in 2013, the agency had little power to recover the money it spent trying to fix the site.

Like many deals between the federal government and private companies, CGI Federal’s contract allowed the company to pass along its costs to taxpayers and to take a fee on top of that—essentially, its profit. If the health insurance site didn’t work, the government could withhold part of that fee, but taxpayers were still responsible for paying the underlying costs. “Cost reimbursement contracts place the risk of performance on the government,” according to the inspector general’s report.

Federal watchdogs have criticized contract structures that put taxpayers at risk for cost overruns. President Barack Obama tried to steer agencies away from these types of deals early in his presidency. In a March 2009 memorandum, he said such arrangements should be reserved for “when circumstances do not allow the agency to define its requirements sufficiently” to set a price, he wrote.

Yet the share of that money flowing through contracts structured like CGI Federal’s, known as “cost plus fixed fee,” has increased from 10 percent to 18 percent since 2009, according to data compiled by Bloomberg Government.