The security breach at Polymarket was executed via a compromised third-party marketing tag that injected code targeting wallets holding over $100,000