Polymarket refunds users after scammers stole millions via website exploit, highlighting ongoing Polymarket user fund security history concerns.