Hackers stole three million dollars from Polymarket users through a compromised third-party vendor