How a five-second trick let traders drain millions from Polymarket