Polymarket loosened an anti-laundering rule amid stolen-card attack