This comment [0] has a better explanation, but this is the theoretical cost - per the 'nicehash-able' column, NiceHash only has 2% of the necessary hashing power available for rent, so an attack like this is most do-able and problematic for smaller coins.
[0] https://news.ycombinator.com/item?id=17173402