Polymarket said one of its third-party providers was breached after users reported seeing their accounts drained.